diff --git a/changelog/unreleased/pull-386 b/changelog/unreleased/pull-386
new file mode 100644
index 0000000..95d4a07
--- /dev/null
+++ b/changelog/unreleased/pull-386
@@ -0,0 +1,6 @@
+Bugfix: Keep cached htpasswd credentials for one minute
+
+The password cache removed entries withing seconds instead of after
+one minute as intended. This has been fixed.
+
+https://github.com/restic/rest-server/pull/386