diff --git a/server/controllers/MeController.js b/server/controllers/MeController.js
index 9451a765..20d03242 100644
--- a/server/controllers/MeController.js
+++ b/server/controllers/MeController.js
@@ -280,7 +280,7 @@ class MeController {
     }
 
     const { password, newPassword } = req.body
-    if (!password || !newPassword || typeof password !== 'string' || typeof newPassword !== 'string') {
+    if ((typeof password !== 'string' && password !== null) || (typeof newPassword !== 'string' && newPassword !== null)) {
       return res.status(400).send('Missing or invalid password or new password')
     }