diff --git a/mautrix_signal/commands/auth.py b/mautrix_signal/commands/auth.py
index 73d5c851..8c455a65 100644
--- a/mautrix_signal/commands/auth.py
+++ b/mautrix_signal/commands/auth.py
@@ -81,6 +81,7 @@ async def link(evt: CommandEvent) -> None:
 
 
 @command_handler(needs_auth=False, management_only=True, help_section=SECTION_AUTH,
+                 is_enabled_for=lambda evt: evt.config["signal.registration_enabled"],
                  help_text="Sign into Signal as the primary device", help_args="<phone>")
 async def register(evt: CommandEvent) -> None:
     if len(evt.args) == 0:
diff --git a/mautrix_signal/config.py b/mautrix_signal/config.py
index 1fc219dc..f020c5a8 100644
--- a/mautrix_signal/config.py
+++ b/mautrix_signal/config.py
@@ -53,6 +53,7 @@ def do_update(self, helper: ConfigUpdateHelper) -> None:
         copy("signal.data_dir")
         copy("signal.delete_unknown_accounts_on_start")
         copy("signal.remove_file_after_handling")
+        copy("signal.registration_enabled")
 
         copy("metrics.enabled")
         copy("metrics.listen_port")
diff --git a/mautrix_signal/example-config.yaml b/mautrix_signal/example-config.yaml
index e8bb41b6..3c1d5727 100644
--- a/mautrix_signal/example-config.yaml
+++ b/mautrix_signal/example-config.yaml
@@ -102,6 +102,8 @@ signal:
     delete_unknown_accounts_on_start: false
     # Whether or not message attachments should be removed from disk after they're bridged.
     remove_file_after_handling: true
+    # Whether or not users can register a primary device
+    registration_enabled: true
 
 # Bridge config
 bridge: