diff --git a/views/security.pug b/views/security.pug
index b968638a946ee3b9a672870737b793cdc3b28ec8..cbe435cdbbd15f03a5f903899bc43ec3c59c035a 100644
--- a/views/security.pug
+++ b/views/security.pug
@@ -49,7 +49,7 @@ html(lang="en")
                     for error, i in errors
                         div.alert.alert-danger.alert-dismissible.fade.show #{ error }
                             a(class="close", href="#", data-dismiss="alert", aria-label="close") ×
-                form(class="needs-validation", method="post", action="/changePwd" novalidate)
+                form(class="needs-validation", method="post", action="/account/changePwd" novalidate)
                     div(class="form-group row")
                         label(for="currPwd") Current Password
                         input(id="inputCurrPwd", name="inputCurrPwd", type="password", class="form-control" required)