diff --git a/src/main/java/de/ph87/tools/group/GroupService.java b/src/main/java/de/ph87/tools/group/GroupService.java
index 5297a76..35bf00b 100644
--- a/src/main/java/de/ph87/tools/group/GroupService.java
+++ b/src/main/java/de/ph87/tools/group/GroupService.java
@@ -79,7 +79,7 @@ public class GroupService {
   public GroupDto changePassword(@NonNull final String privateUuid, @NonNull final GroupChangePasswordInbound request) {
     final User user = userService.getByPrivateUuidOrThrow(privateUuid);
     final Group group = groupOfUserService.getGroupOfUser(request.uuid, user);
-    if (group.isOwnedBy(user)) {
+    if (!group.isOwnedBy(user)) {
       throw new ResponseStatusException(HttpStatus.FORBIDDEN);
     }
     group.setPassword(request.password);