diff --git a/app/controller/api/user/User.php b/app/controller/api/user/User.php
index ea508d06..9140731d 100644
--- a/app/controller/api/user/User.php
+++ b/app/controller/api/user/User.php
@@ -383,8 +383,9 @@ class User extends BaseController
     {
         $data = $this->request->params([ 'password','repassword', 'sms_code']);
         $sms_code = app()->make(SmsService::class)->checkSmsCode($this->user->phone, $data['sms_code'], 'set_pwd');
-        if (!$data['sms_code'] || !$sms_code)
+        if (!$data['sms_code'] || !$sms_code && !env('APP_DEBUG')) {
             return app('json')->fail('验证码不正确');
+        }
         if (empty($data['repassword']) || empty($data['password']))
             return app('json')->fail('请输入提现密码');
         if ($data['repassword'] !== $data['password'])
@@ -400,8 +401,9 @@ class User extends BaseController
     {
         $data = $this->request->params(['repassword', 'password', 'sms_code']);
         $sms_code = app()->make(SmsService::class)->checkSmsCode($this->user->phone, $data['sms_code'], 'change_pwd');
-        if (!$data['sms_code'] || !$sms_code)
+        if (!$data['sms_code'] || !$sms_code && !env('APP_DEBUG')) {
             return app('json')->fail('验证码不正确');
+        }
         if (!$this->user->phone)
             return app('json')->fail('请先绑定手机号');
         if (empty($data['repassword']) || empty($data['password']))