diff --git a/src/AccessControl/AccessChecker.php b/src/AccessControl/AccessChecker.php
index <HASH>..<HASH> 100644
--- a/src/AccessControl/AccessChecker.php
+++ b/src/AccessControl/AccessChecker.php
@@ -73,6 +73,9 @@ class AccessChecker
         $this->permissions = $permissions;
         $this->randomGenerator = $randomGenerator;
         $this->cookieOptions = $cookieOptions;
+
+        // Disable password saves by default
+        $this->repositoryUsers->getPersister()->disableField('password');
     }
 
     /**
diff --git a/src/Users.php b/src/Users.php
index <HASH>..<HASH> 100644
--- a/src/Users.php
+++ b/src/Users.php
@@ -35,6 +35,8 @@ class Users
     {
         $this->app = $app;
         $this->repository = $this->app['storage']->getRepository('Bolt\Storage\Entity\Users');
+        // Disable password saves by default
+        $this->repository->getPersister()->disableField('password');
 
         /** @deprecated Will be removed in Bolt 3.0 */
         $this->usertable = $this->app['storage']->getTablename('users');
Set the persister to disable password fields by default