diff --git a/conf/turnserver.conf b/conf/turnserver.conf
index 420503e..9575f9e 100644
--- a/conf/turnserver.conf
+++ b/conf/turnserver.conf
@@ -1,6 +1,6 @@
-lt-cred-mech
 use-auth-secret
 static-auth-secret={{ turnserver_pwd }}
+cli-password={{ turnserver_cli_pwd }}
 realm={{ domain }}
 
 tls-listening-port={{ port_turnserver_tls }}
diff --git a/scripts/_common.sh b/scripts/_common.sh
index 1c1c832..99f95bb 100755
--- a/scripts/_common.sh
+++ b/scripts/_common.sh
@@ -109,6 +109,11 @@ ensure_vars_set() {
         ynh_app_setting_set --app="$app" --key=turnserver_pwd --value="$turnserver_pwd"
     fi
 
+    if [ -z "${turnserver_cli_pwd:-}" ]; then
+        turnserver_cli_pwd=$(ynh_string_random --length=30)
+        ynh_app_setting_set --app="$app" --key=turnserver_cli_pwd --value="$turnserver_cli_pwd"
+    fi
+
     if [ -z "${web_client_location:-}" ]
     then
         web_client_location="https://matrix.to/"