diff --git a/core/Controller/AppPasswordController.php b/core/Controller/AppPasswordController.php
index 096261d2311..205381e83c1 100644
--- a/core/Controller/AppPasswordController.php
+++ b/core/Controller/AppPasswordController.php
@@ -58,6 +58,7 @@ class AppPasswordController extends \OCP\AppFramework\OCSController {
 
 	/**
 	 * @NoAdminRequired
+	 * @PasswordConfirmationRequired
 	 *
 	 * Create app password
 	 *