diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index 954f3580c..1c949f738 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "33154ce74519ad98f1f44a4fd40f6407f4297a2e",
-  "syncedAt": "2026-04-15T13:37:13.804Z"
+  "sha": "b2753fd0dede9cf3918eec769cf3ab40558ffe5f",
+  "syncedAt": "2026-04-15T15:49:11.190Z"
 }
diff --git a/docs/channels/matrix.md b/docs/channels/matrix.md
index 01c0ae6cd..f540eced2 100644
--- a/docs/channels/matrix.md
+++ b/docs/channels/matrix.md
@@ -613,7 +613,8 @@ if you want a shorter or longer retry window.
 Startup also performs a conservative crypto bootstrap pass automatically.
 That pass tries to reuse the current secret storage and cross-signing identity first, and avoids resetting cross-signing unless you run an explicit bootstrap repair flow.
 
-If startup finds broken bootstrap state and `channels.matrix.password` is configured, OpenClaw can attempt a stricter repair path.
+If startup still finds broken bootstrap state, OpenClaw can attempt a guarded repair path even when `channels.matrix.password` is not configured.
+If the homeserver requires password-based UIA for that repair, OpenClaw logs a warning and keeps startup non-fatal instead of aborting the bot.
 If the current device is already owner-signed, OpenClaw preserves that identity instead of resetting it automatically.
 
 See [Matrix migration](/install/migrating-matrix) for the full upgrade flow, limits, recovery commands, and common migration messages.