diff --git a/.env b/.env
index 0c231d7499cc936166a32a5264c655265161ba0d..735724eede9b8cbc945d6dc1e3841da3c44c57ae 100644
--- a/.env
+++ b/.env
@@ -27,6 +27,9 @@
 ## The change only applies when the password is changed
 # PASSWORD_ITERATIONS=100000
 
+## Whether password hint should be sent into the error response when the client request it
+# SHOW_PASSWORD_HINT=true
+
 ## Domain settings
 ## The domain must match the address from where you access the server
 ## Unless you are using U2F, or having problems with attachments not downloading, there is no need to change this
diff --git a/src/api/core/accounts.rs b/src/api/core/accounts.rs
index 03315d6bd5a4c07ce99226221b452bea09d2a91e..41cccaae1a77afe51266ed4b194e7e8670393db4 100644
--- a/src/api/core/accounts.rs
+++ b/src/api/core/accounts.rs
@@ -247,3 +247,23 @@ fn revision_date(headers: Headers) -> String {
     let revision_date = headers.user.updated_at.timestamp();
     revision_date.to_string()
 }
+
+#[derive(Deserialize)]
+#[allow(non_snake_case)]
+struct PasswordHintData {
+    Email: String,
+}
+
+#[post("/accounts/password-hint", data = "<data>")]
+fn password_hint(data: JsonUpcase<PasswordHintData>, conn: DbConn) -> EmptyResult {
+    let data: PasswordHintData = data.into_inner().data;
+
+    if !CONFIG.show_password_hint {
+        return Ok(())
+    }
+
+    match User::find_by_mail(&data.Email, &conn) {
+        Some(user) => err!(user.password_hint.to_owned().unwrap_or("".to_string())),
+        None => Ok(()),
+    }
+}
diff --git a/src/api/core/mod.rs b/src/api/core/mod.rs
index 513319bc63fa74827f4f3259038673f33c595f1c..5ce63062956ff5ad952c8dc59a47d8fd7fb4648a 100644
--- a/src/api/core/mod.rs
+++ b/src/api/core/mod.rs
@@ -23,6 +23,7 @@ pub fn routes() -> Vec<Route> {
         post_email,
         delete_account,
         revision_date,
+        password_hint,
 
         sync,
 
diff --git a/src/main.rs b/src/main.rs
index 59840b9c662b7fc3bba4873eb951aa38b916e130..4a42452de7cb21e51adfdf3a7bd397725911e108 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -169,6 +169,7 @@ pub struct Config {
     local_icon_extractor: bool,
     signups_allowed: bool,
     password_iterations: i32,
+    show_password_hint: bool,
     domain: String,
     domain_set: bool,
 }
@@ -197,6 +198,8 @@ impl Config {
             local_icon_extractor: util::parse_option_string(env::var("LOCAL_ICON_EXTRACTOR").ok()).unwrap_or(false),
             signups_allowed: util::parse_option_string(env::var("SIGNUPS_ALLOWED").ok()).unwrap_or(true),
             password_iterations: util::parse_option_string(env::var("PASSWORD_ITERATIONS").ok()).unwrap_or(100_000),
+            show_password_hint: util::parse_option_string(env::var("SHOW_PASSWORD_HINT").ok()).unwrap_or(true),
+
             domain_set: domain.is_ok(),
             domain: domain.unwrap_or("http://localhost".into()),
         }