diff --git a/src/packages/fff/fff-web-ui/Makefile b/src/packages/fff/fff-web-ui/Makefile
index f4079b52..42eaf1f3 100644
--- a/src/packages/fff/fff-web-ui/Makefile
+++ b/src/packages/fff/fff-web-ui/Makefile
@@ -1,7 +1,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=fff-web-ui
-PKG_RELEASE:=16
+PKG_RELEASE:=17
 
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)
 
diff --git a/src/packages/fff/fff-web-ui/files/www/ssl/cgi-bin/password.html b/src/packages/fff/fff-web-ui/files/www/ssl/cgi-bin/password.html
index e65d0720..3f0a3ac1 100755
--- a/src/packages/fff/fff-web-ui/files/www/ssl/cgi-bin/password.html
+++ b/src/packages/fff/fff-web-ui/files/www/ssl/cgi-bin/password.html
@@ -4,7 +4,7 @@
 # write
 if [ "$REQUEST_METHOD" = "POST" ] ; then
 	#check for special characters in password
-	regex='^[a-zA-Z0-9!#\$%\(\)\*\+,\.:;=\?@\^_-]+$'
+	regex='^[a-zA-Z0-9!#\$%\(\)\*\+,\.:;=\?@\^_&-]+$'
 	if [ "$POST_pass1" = "" ] ; then
 		MSG='<span class="red">Das Passwort darf nicht leer sein!</span>'
     elif ! echo -n "$POST_pass1" | egrep -q "$regex"; then