diff --git a/endpoints/api/__init__.py b/endpoints/api/__init__.py
index a9d2ecdb0..2f5e2045e 100644
--- a/endpoints/api/__init__.py
+++ b/endpoints/api/__init__.py
@@ -285,7 +285,7 @@ def require_fresh_login(func):
     last_login = session.get('login_time', datetime.datetime.min)
     valid_span = datetime.datetime.now() - datetime.timedelta(minutes=10)
 
-    if last_login >= valid_span:
+    if not user.password_hash or last_login >= valid_span:
       return func(*args, **kwargs)
     
     raise FreshLoginRequired()