diff --git a/images/chromium-headful/client/src/components/connect.vue b/images/chromium-headful/client/src/components/connect.vue
index 43d81af1..0883cbfd 100644
--- a/images/chromium-headful/client/src/components/connect.vue
+++ b/images/chromium-headful/client/src/components/connect.vue
@@ -102,8 +102,13 @@
         displayname = this.$accessor.displayname || usr
       }
 
-      // KERNEL: auto-login
-      this.$accessor.login({ displayname: 'kernel', password: 'admin' })
+      // KERNEL: auto-login, but respect caller-supplied credentials first.
+      // This keeps the legacy fallback for existing deployments while allowing
+      // embeds and links that provide explicit credentials to work as intended.
+      this.$accessor.login({
+        displayname: displayname || 'kernel',
+        password: password || 'admin',
+      })
       this.autoPassword = null
     }