diff --git a/scripts/deploy-prod.sh b/scripts/deploy-prod.sh
index 883578a..4abd2af 100755
--- a/scripts/deploy-prod.sh
+++ b/scripts/deploy-prod.sh
@@ -152,6 +152,13 @@ fi
 
 wait_for_postgres || exit 1
 
+# Sync DB password: postgres local socket doesn't need auth, so we can
+# ALTER USER to match whatever POSTGRES_PASSWORD is in .env.docker.
+# This fixes P1000 auth failures when the volume was initialized with a different password.
+docker compose exec -T postgres psql -U "${POSTGRES_USER:-memento}" -d "${POSTGRES_DB:-memento}" -c \
+  "ALTER USER \"${POSTGRES_USER:-memento}\" WITH PASSWORD '${POSTGRES_PASSWORD:-memento}';" \
+  2>/dev/null && echo "DB password synced" || echo "WARN: could not sync DB password"
+
 docker compose exec -T postgres sh -c 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -c "CREATE EXTENSION IF NOT EXISTS vector;"' >/dev/null
 
 if git diff --name-only HEAD~1 HEAD 2>/dev/null | grep -q '^memento-note/prisma/migrations/'; then