diff --git a/app/components/settings.tsx b/app/components/settings.tsx
index ec22a1ab..a0a477af 100644
--- a/app/components/settings.tsx
+++ b/app/components/settings.tsx
@@ -239,19 +239,23 @@ export function Settings(props: { closeSettings: () => void }) {
           </div>
         </List>
         <List>
-          <SettingItem
-            title={Locale.Settings.AccessCode.Title}
-            subTitle={Locale.Settings.AccessCode.SubTitle}
-          >
-            <input
-              value={accessStore.accessCode}
-              type="text"
-              placeholder={Locale.Settings.AccessCode.Placeholder}
-              onChange={(e) => {
-                accessStore.updateCode(e.currentTarget.value);
-              }}
-            ></input>
-          </SettingItem>
+          {enabledAccessControl ? (
+            <SettingItem
+              title={Locale.Settings.AccessCode.Title}
+              subTitle={Locale.Settings.AccessCode.SubTitle}
+            >
+              <input
+                value={accessStore.accessCode}
+                type="text"
+                placeholder={Locale.Settings.AccessCode.Placeholder}
+                onChange={(e) => {
+                  accessStore.updateCode(e.currentTarget.value);
+                }}
+              ></input>
+            </SettingItem>
+          ) : (
+            <></>
+          )}
 
           <SettingItem
             title={Locale.Settings.HistoryCount.Title}
diff --git a/middleware.ts b/middleware.ts
index afb54c31..0ab3a101 100644
--- a/middleware.ts
+++ b/middleware.ts
@@ -14,7 +14,7 @@ export function middleware(req: NextRequest, res: NextResponse) {
   console.log("[Auth] got access code:", accessCode);
   console.log("[Auth] hashed access code:", hashedCode);
 
-  if (!ACCESS_CODES.has(hashedCode)) {
+  if (ACCESS_CODES.size > 0 && !ACCESS_CODES.has(hashedCode)) {
     return NextResponse.json(
       {
         needAccessCode: true,