diff --git a/CHANGES b/CHANGES
index 130e75f4f..98548be6c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -487,6 +487,9 @@
 [0.12.6]
 - Allow setting an alternate external domain for apps
 
+[0.12.7]
+- Fix changing password
+
 [0.13.0]
 - Upgrade to ubuntu 16.04
 - Add event log view
diff --git a/webadmin/src/js/client.js b/webadmin/src/js/client.js
index c8735c347..e3d92d22b 100644
--- a/webadmin/src/js/client.js
+++ b/webadmin/src/js/client.js
@@ -633,7 +633,7 @@ angular.module('Application').service('Client', ['$http', 'md5', 'Notification',
             newPassword: newPassword
         };
 
-        $http.post(client.apiOrigin + '/api/v1/profile/' + this._userInfo.id + '/password', data).success(function(data, status) {
+        $http.put(client.apiOrigin + '/api/v1/profile/password', data).success(function(data, status) {
             if (status !== 204) return callback(new ClientError(status, data));
             callback(null, data);
         }).error(defaultErrorHandler(callback));