diff --git a/login/change_password.php b/login/change_password.php
index 481c2c3f724..dee78bad953 100644
--- a/login/change_password.php
+++ b/login/change_password.php
@@ -4,6 +4,9 @@
 
     $id = optional_param('id', SITEID);
 
+    //HTTPS is potentially required in this page
+    httpsrequired();
+
     if (!$course = get_record('course', 'id', $id)) {
         error('No such course!');
     }