Skip to main content

Change (or set) the authenticated user's password

POST 
/api/v1/auth/change-password

Rotates the caller's password without an emailed reset token. currentPassword is required when the account already has a password; for an SSO-only account (hasPassword: false on /api/v1/auth/me) it is ignored and this call sets the initial password. All of the caller's other sessions are revoked; the calling session and any personal access tokens keep working. A confirmation email is sent.

Request​

Responses​

Password changed