diff --git a/core/Controller/AppPasswordController.php b/core/Controller/AppPasswordController.php
index 096261d2311f2..205381e83c11d 100644
--- a/core/Controller/AppPasswordController.php
+++ b/core/Controller/AppPasswordController.php
@@ -58,6 +58,7 @@ public function __construct(
 
 	/**
 	 * @NoAdminRequired
+	 * @PasswordConfirmationRequired
 	 *
 	 * Create app password
 	 *