diff --git a/charts/flame/Chart.yaml b/charts/flame/Chart.yaml
index a3d574fc0..bcd3743c0 100644
--- a/charts/flame/Chart.yaml
+++ b/charts/flame/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.0
+version: 0.2.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "latest"
+appVersion: "2.1.0"
diff --git a/charts/flame/README.md b/charts/flame/README.md
index 78846e96b..15b80b9d2 100644
--- a/charts/flame/README.md
+++ b/charts/flame/README.md
@@ -6,7 +6,7 @@ Helm chart for flame "server startpage"
 
 Please note that flame stores settings in sqlite database and with default settings (persistance.enabled: false) it will lose all settings after pod restart
 
-It's also worth mentioning that flame doesn't have versioned container images - so chart is set to pull "latest" tag. Beware of surprise updates.
+**Please note that by default flame will use password "password", please edit flame.password variable with your preferred password or upload secret with key PASSWORD and use flame.existingSecret to point flame to that secret**
 
 Chart supports flame ingress discovery, you will need to enable kubernetes integration in settings (cog icon in lower left corner, "Other" setting menu) and add following annotations to your ingresses:
 ```yaml
@@ -31,4 +31,6 @@ persistence:
   enabled: true
   size: 1Gi
   storageClassName: longhorn
+flame:
+  password: password
 ```
\ No newline at end of file
diff --git a/charts/flame/templates/deployment.yaml b/charts/flame/templates/deployment.yaml
index 1034cbf45..4b025dd58 100644
--- a/charts/flame/templates/deployment.yaml
+++ b/charts/flame/templates/deployment.yaml
@@ -45,6 +45,16 @@ spec:
               port: http
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
+          env:
+            - name: PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  {{- if .Values.flame.existingSecret }}
+                  name: {{ .Values.flame.existingSecret }}
+                  {{- else }}
+                  name: {{ .Release.Name }}-secret
+                  {{- end }}
+                  key: password
           volumeMounts:
             - name: data
               mountPath: /app/data
diff --git a/charts/flame/templates/secret.yaml b/charts/flame/templates/secret.yaml
new file mode 100644
index 000000000..0d50ceeb6
--- /dev/null
+++ b/charts/flame/templates/secret.yaml
@@ -0,0 +1,12 @@
+{{- if or .Values.flame.password }}
+{{- if not .Values.flame.existingSecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Release.Name }}-secret
+  labels:
+    {{- include "flame.labels" . | nindent 4 }}
+data:
+  password: {{ .Values.flame.password | b64enc | quote }}
+{{- end }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/flame/values.yaml b/charts/flame/values.yaml
index 90129a53f..febf32f50 100644
--- a/charts/flame/values.yaml
+++ b/charts/flame/values.yaml
@@ -23,6 +23,10 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: ""
 
+flame:
+  password: password
+  existingSecret:
+
 podAnnotations: {}
 
 podSecurityContext: {}