diff --git a/core/Controller/AppPasswordController.php b/core/Controller/AppPasswordController.php
index 3f254f03370b3..c7ad89b108abc 100644
--- a/core/Controller/AppPasswordController.php
+++ b/core/Controller/AppPasswordController.php
@@ -66,6 +66,7 @@ public function __construct(string $appName,
 
 	/**
 	 * @NoAdminRequired
+	 * @PasswordConfirmationRequired
 	 *
 	 * @throws OCSForbiddenException
 	 */