diff --git a/core/js/setup.js b/core/js/setup.js
index b3b2049c44..5b0bd679db 100644
--- a/core/js/setup.js
+++ b/core/js/setup.js
@@ -123,6 +123,7 @@ $(document).ready(function() {
 			t('core', 'Strong password')
 		],
 		drawTitles: true,
+		nonce: btoa(OC.requestToken),
 	});
 
 	// centers the database chooser if it is too wide
diff --git a/settings/js/security_password.js b/settings/js/security_password.js
index f7cb657c25..c23e60cfea 100644
--- a/settings/js/security_password.js
+++ b/settings/js/security_password.js
@@ -81,5 +81,6 @@ $(document).ready(function () {
 		],
 		drawTitles: true,
 		$addAfter: $('input[name="newpassword-clone"]'),
+		nonce: btoa(OC.requestToken),
 	});
-});
\ No newline at end of file
+});