diff --git a/src/gui/runtime/gui_runtime.cpp b/src/gui/runtime/gui_runtime.cpp
index d250404..eff0bd1 100644
--- a/src/gui/runtime/gui_runtime.cpp
+++ b/src/gui/runtime/gui_runtime.cpp
@@ -94,12 +94,11 @@ int GuiRuntime::CreateConnectionPeer() {
           sizeof(params_.turn_server_ip) - 1);
   params_.turn_server_ip[sizeof(params_.turn_server_ip) - 1] = '\0';
   params_.turn_server_port = coturn_server_port;
-  strncpy((char *)params_.turn_server_username, "crossdesk",
-          sizeof(params_.turn_server_username) - 1);
-  params_.turn_server_username[sizeof(params_.turn_server_username) - 1] = '\0';
-  strncpy((char *)params_.turn_server_password, "crossdeskpw",
-          sizeof(params_.turn_server_password) - 1);
-  params_.turn_server_password[sizeof(params_.turn_server_password) - 1] = '\0';
+  // TURN credentials are issued by the signaling server after login. Keep the
+  // initial values empty so a reusable static password is never embedded in
+  // the client binary.
+  params_.turn_server_username[0] = '\0';
+  params_.turn_server_password[0] = '\0';
 
   strncpy(params_.log_path, dll_log_path_.c_str(),
           sizeof(params_.log_path) - 1);
diff --git a/submodules/minirtc b/submodules/minirtc
index 50ca51e..2f68819 160000
--- a/submodules/minirtc
+++ b/submodules/minirtc
@@ -1 +1 @@
-Subproject commit 50ca51ecc16d199aee8980a9e1a69c2996f30099
+Subproject commit 2f6881917fb5757c33f4ee9b6f5a80f9b4c5ae90