diff --git a/clientapi/routing/capabilities.go b/clientapi/routing/capabilities.go
index 199b1524..72668fa5 100644
--- a/clientapi/routing/capabilities.go
+++ b/clientapi/routing/capabilities.go
@@ -23,8 +23,8 @@ import (
 	"github.com/matrix-org/util"
 )
 
-// SendMembership implements PUT /rooms/{roomID}/(join|kick|ban|unban|leave|invite)
-// by building a m.room.member event then sending it to the room server
+// GetCapabilities returns information about the server's supported feature set
+// and other relevant capabilities to an authenticated user.
 func GetCapabilities(
 	req *http.Request, rsAPI roomserverAPI.RoomserverInternalAPI,
 ) util.JSONResponse {
@@ -41,6 +41,9 @@ func GetCapabilities(
 
 	response := map[string]interface{}{
 		"capabilities": map[string]interface{}{
+			"m.change_password": map[string]bool{
+				"enabled": true,
+			},
 			"m.room_versions": roomVersionsQueryRes,
 		},
 	}
diff --git a/sytest-whitelist b/sytest-whitelist
index e049f8e7..29e9166a 100644
--- a/sytest-whitelist
+++ b/sytest-whitelist
@@ -480,3 +480,4 @@ Federation key API can act as a notary server via a GET request
 Inbound /make_join rejects attempts to join rooms where all users have left
 Inbound federation rejects invites which include invalid JSON for room version 6
 Inbound federation rejects invite rejections which include invalid JSON for room version 6
+GET /capabilities is present and well formed for registered user 
\ No newline at end of file