diff --git a/packages/vscode/src/opencode.ts b/packages/vscode/src/opencode.ts
index 2b8620c1..f1dd3631 100644
--- a/packages/vscode/src/opencode.ts
+++ b/packages/vscode/src/opencode.ts
@@ -73,7 +73,7 @@ function generateSecureOpenCodePassword(): string {
 }
 
 function buildOpenCodeAuthHeader(password: string): string {
-  const username = process.env.OPENCODE_SERVER_USERNAME || 'opencode';
+  const username = process.env.OPENCODE_SERVER_USERNAME?.trim() || 'opencode';
   return `Basic ${Buffer.from(`${username}:${password}`, 'utf8').toString('base64')}`;
 }
 
diff --git a/packages/web/server/lib/opencode/auth-state-runtime.js b/packages/web/server/lib/opencode/auth-state-runtime.js
index c95184fc..ce199e2f 100644
--- a/packages/web/server/lib/opencode/auth-state-runtime.js
+++ b/packages/web/server/lib/opencode/auth-state-runtime.js
@@ -51,7 +51,7 @@ export const createOpenCodeAuthStateRuntime = (dependencies) => {
       return {};
     }
 
-    const username = process.env.OPENCODE_SERVER_USERNAME || 'opencode';
+    const username = process.env.OPENCODE_SERVER_USERNAME?.trim() || 'opencode';
     const credentials = Buffer.from(`${username}:${password}`).toString('base64');
     return { Authorization: `Basic ${credentials}` };
   };