diff --git a/ChangeLog.d/fix-jpake-user-peer.txt b/ChangeLog.d/fix-jpake-user-peer.txt
new file mode 100644
index 0000000000..ae6d441ac0
--- /dev/null
+++ b/ChangeLog.d/fix-jpake-user-peer.txt
@@ -0,0 +1,4 @@
+Bugfix
+   * Allow setting user and peer identity for EC J-PAKE operation
+     instead role in PAKE PSA Crypto API as described in the specification.
+     This is partial fix that allows only "client"/"server" ids.