diff --git a/Application.hs b/Application.hs
index a526580..11e5ad4 100644
--- a/Application.hs
+++ b/Application.hs
@@ -61,6 +61,7 @@ import           Handler.Package
 import           Handler.PackageList
 import           Handler.CompressorStatus
 import           Handler.Tag
+import           Handler.BannedTags
 
 -- This line actually creates our YesodDispatch instance. It is the second half
 -- of the call to mkYesodData which occurs in Foundation.hs. Please see the
diff --git a/Handler/BannedTags.hs b/Handler/BannedTags.hs
new file mode 100644
index 0000000..2ddcd92
--- /dev/null
+++ b/Handler/BannedTags.hs
@@ -0,0 +1,37 @@
+module Handler.BannedTags where
+
+import Import
+import Data.Slug (unSlug, mkSlug, Slug)
+
+checkSlugs :: Monad m => Textarea -> m (Either Text [Slug])
+checkSlugs (Textarea t) =
+    return $ first tshow $ (mapM mkSlug $ filter (not . null) $ lines $ filter (/= '\r') t)
+
+fromSlugs :: [Slug] -> Textarea
+fromSlugs = Textarea . unlines . map unSlug
+
+getBannedTagsR :: Handler Html
+getBannedTagsR = do
+    Entity _ user <- requireAuth
+    extra <- getExtra
+    when (unSlug (userHandle user) `notMember` adminUsers extra)
+        $ permissionDenied "You are not an administrator"
+    curr <- fmap (map (bannedTagTag . entityVal))
+          $ runDB $ selectList [] [Asc BannedTagTag]
+    ((res, widget), enctype) <- runFormPost $ renderDivs
+        $ areq
+            (checkMMap checkSlugs fromSlugs textareaField)
+            "Banned tags (one per line)" $ Just curr
+    case res of
+        FormSuccess tags -> do
+            runDB $ do
+                deleteWhere ([] :: [Filter BannedTag])
+                insertMany_ $ map BannedTag tags
+            setMessage "Tags updated"
+            redirect BannedTagsR
+        _ -> defaultLayout $ do
+            setTitle "Banned Tags"
+            $(widgetFile "banned-tags")
+
+putBannedTagsR :: Handler Html
+putBannedTagsR = getBannedTagsR
diff --git a/Settings.hs b/Settings.hs
index 68b1ff3..882f97a 100644
--- a/Settings.hs
+++ b/Settings.hs
@@ -67,6 +67,7 @@ widgetFile = (if development then widgetFileReload
 data Extra = Extra
     { storeConfig :: !BlobStoreConfig
     , hackageRoot :: !HackageRoot
+    , adminUsers  :: !(HashSet Text)
     }
     deriving Show
 
@@ -74,6 +75,7 @@ parseExtra :: DefaultEnv -> Object -> Parser Extra
 parseExtra _ o = Extra
     <$> o .: "blob-store"
     <*> (HackageRoot <$> o .: "hackage-root")
+    <*> o .:? "admin-users" .!= mempty
 
 data BlobStoreConfig = BSCFile !FilePath
                      | BSCAWS !FilePath !Text !Text !Text !Text
diff --git a/config/routes b/config/routes
index af86382..6607eaf 100644
--- a/config/routes
+++ b/config/routes
@@ -31,4 +31,5 @@
 /package/#PackageName/unlike PackageUnlikeR POST
 /package/#PackageName/tag PackageTagR POST
 /tags TagListR GET
-/tag/#Slug TagR GET
\ No newline at end of file
+/tag/#Slug TagR GET
+/banned-tags BannedTagsR GET PUT
diff --git a/config/settings.yml-sample b/config/settings.yml-sample
index f075343..9f2eccc 100644
--- a/config/settings.yml-sample
+++ b/config/settings.yml-sample
@@ -3,6 +3,8 @@ Default: &defaults
   port: 3000
   approot: "http://localhost:3000"
   hackage-root: http://hackage.fpcomplete.com
+  admin-users:
+  - fpcomplete
 
 Development:
   <<: *defaults
diff --git a/stackage-server.cabal b/stackage-server.cabal
index a435774..2d38994 100644
--- a/stackage-server.cabal
+++ b/stackage-server.cabal
@@ -46,6 +46,7 @@ library
                      Handler.PackageList
                      Handler.CompressorStatus
                      Handler.Tag
+                     Handler.BannedTags
 
     if flag(dev) || flag(library-only)
         cpp-options:   -DDEVELOPMENT
diff --git a/templates/banned-tags.hamlet b/templates/banned-tags.hamlet
new file mode 100644
index 0000000..e16c72e
--- /dev/null
+++ b/templates/banned-tags.hamlet
@@ -0,0 +1,6 @@
+<div .container>
+    <h1>Banned Tags
+    <a href=@{TagListR}>List of viewable tags
+    <form method=post action=@{BannedTagsR}?_method=PUT enctype=#{enctype}>
+        ^{widget}
+        <button .btn>Update banned tags
diff --git a/templates/banned-tags.lucius b/templates/banned-tags.lucius
new file mode 100644
index 0000000..0f105cf
--- /dev/null
+++ b/templates/banned-tags.lucius
@@ -0,0 +1,4 @@
+textarea {
+    width: 500px;
+    height: 400px;
+}