diff --git a/deploy.sh b/deploy.sh
index c7c85a9..5495bbf 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -43,13 +43,14 @@ if [ ! -f .env ]; then
         echo "   Please update ENCRYPTION_KEY in .env with a secure random value"
     fi
     
-    # Update .env with generated key
+    # Update .env with generated key (escape special chars for sed)
+    ESCAPED_KEY=$(echo "$ENCRYPTION_KEY" | sed 's/[&/\\]/\\&/g')
     if [[ "$OSTYPE" == "darwin"* ]]; then
         # macOS
-        sed -i '' "s/change-this-to-a-secure-random-key/$ENCRYPTION_KEY/" .env
+        sed -i '' "s|change-this-to-a-secure-random-key|$ESCAPED_KEY|" .env
     else
         # Linux
-        sed -i "s/change-this-to-a-secure-random-key/$ENCRYPTION_KEY/" .env
+        sed -i "s|change-this-to-a-secure-random-key|$ESCAPED_KEY|" .env
     fi
     
     echo "✅ Generated secure encryption key"
diff --git a/install.sh b/install.sh
index e918589..0962bbf 100755
--- a/install.sh
+++ b/install.sh
@@ -113,11 +113,12 @@ if [ ! -f .env ]; then
         echo "   Please update ENCRYPTION_KEY in .env with a secure random value"
     fi
     
-    # Update .env with generated key
+    # Update .env with generated key (escape special chars for sed)
+    ESCAPED_KEY=$(echo "$ENCRYPTION_KEY" | sed 's/[&/\\]/\\&/g')
     if [[ "$OSTYPE" == "darwin"* ]]; then
-        sed -i '' "s/change-this-to-a-secure-random-key/$ENCRYPTION_KEY/" .env
+        sed -i '' "s|change-this-to-a-secure-random-key|$ESCAPED_KEY|" .env
     else
-        sed -i "s/change-this-to-a-secure-random-key/$ENCRYPTION_KEY/" .env
+        sed -i "s|change-this-to-a-secure-random-key|$ESCAPED_KEY|" .env
     fi
     echo "✅ Generated secure encryption key"
 else