diff --git a/src/main/java/edu/ntnu/idatt2106/backend/security/WebSecurityConfig.java b/src/main/java/edu/ntnu/idatt2106/backend/security/WebSecurityConfig.java
index fa2cc0800fb4cbca19fcabacae22c2069a00897a..90773c90bc5fe41858eca854d76e7067a96e1f60 100644
--- a/src/main/java/edu/ntnu/idatt2106/backend/security/WebSecurityConfig.java
+++ b/src/main/java/edu/ntnu/idatt2106/backend/security/WebSecurityConfig.java
@@ -60,6 +60,7 @@ public class WebSecurityConfig {
                 .requestMatchers("/recipe/**").permitAll()
                 .requestMatchers("/user/auth/refreshToken").permitAll()
                 .requestMatchers("/swagger-ui/**", "/v3/api-docs/**").permitAll()
+                .requestMatchers("/user/edit/password").permitAll()
                 .anyRequest().authenticated();
 
         return http.build();