diff --git a/apps/users/views.py b/apps/users/views.py
index 2014527..8de36bb 100644
--- a/apps/users/views.py
+++ b/apps/users/views.py
@@ -60,7 +60,7 @@ class RequestOTPView(generics.CreateAPIView):
 class ChangePasswordView(generics.UpdateAPIView):
         permission_classes = [permissions.IsAuthenticated, IsAuthenticatedOrTokenHasScope]
         serializer_class = ChangePasswordSerializer
-        required_scopes = []
+        required_scopes = ["accounts.account:change_password"]
         model = User
 
         def get_object(self, queryset=None):