diff --git a/app/Http/Requests/UserRequest.php b/app/Http/Requests/UserRequest.php
index 92de65b..53968cf 100644
--- a/app/Http/Requests/UserRequest.php
+++ b/app/Http/Requests/UserRequest.php
@@ -36,8 +36,12 @@ class UserRequest extends FormRequest
      */
     public function rules()
     {
+        $user = auth()->user();
+        $character_ids = $user->characters->pluck('id');
+
         return [
             'username' => [ 'required', 'min:4', Rule::unique('users')->ignore(auth()->user()) ],
+            'character_id' => 'nullable|in:' . $character_ids->join(','),
             'current_password' => 'nullable|required_with:password|current_password',
             'password' => 'nullable|min:8|confirmed',
         ];