diff --git a/docs/reference/configuration.md b/docs/reference/configuration.md
index 70841580..46680799 100644
--- a/docs/reference/configuration.md
+++ b/docs/reference/configuration.md
@@ -259,6 +259,42 @@ passwords:
       algorithm: argon2id
 ```
 
+## `account`
+
+Configuration related to account management
+
+```yaml
+account:
+  # Whether users are allowed to change their email addresses.
+  #
+  # Defaults to `true`.
+  email_change_allowed: true
+
+  # Whether users are allowed to change their display names
+  #
+  # Defaults to `true`.
+  # This should be in sync with the policy in the homeserver configuration.
+  displayname_change_allowed: true
+
+  # Whether to enable self-service password registration
+  #
+  # Defaults to `false`.
+  # This has no effect if password login is disabled.
+  password_registration_enabled: false
+
+  # Whether users are allowed to change their passwords
+  #
+  # Defaults to `true`.
+  # This has no effect if password login is disabled.
+  password_change_allowed: true
+
+  # Whether email-based password recovery is enabled
+  #
+  # Defaults to `false`.
+  # This has no effect if password login is disabled.
+  password_recovery_enabled: false
+```
+
 ## `captcha`
 
 Settings related to CAPTCHA protection
diff --git a/docs/setup/running.md b/docs/setup/running.md
index 82768a69..f31c6e8a 100644
--- a/docs/setup/running.md
+++ b/docs/setup/running.md
@@ -37,6 +37,7 @@ A few configuration sections might still require some tweaking, including:
  - [`telemetry`](../reference/configuration.md#telemetry): to setup metrics, tracing and Sentry crash reporting
  - [`email`](../reference/configuration.md#email): to setup email sending
  - [`password`](../reference/configuration.md#password): to enable/disable password authentication
+ - [`account`](../reference/configuration.md#account): to configure what account management features are enabled
  - [`upstream_oauth`](../reference/configuration.md#upstream-oauth): to configure upstream OAuth providers