---
title: "Forgot Password"
method: POST
path: "/api/auth/password/forgot"
tags: ["auth"]
---

# Forgot Password

`POST /api/auth/password/forgot`

## Request

- Base URL: `https://api.advisorppc.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.advisorppc.com/api/auth/password/forgot`
- Auth: none declared

Email a single-use reset link if the address belongs to an account.

Always answers 202 with the same body. Reporting "no such account" here
would turn the endpoint into a customer-list oracle, so the only signal a
caller gets is that the request was accepted.

## Request body

- PasswordForgotIn
  - `email` string, email, required

## Response `202`

Successful Response

- PasswordForgotOut: Deliberately contentless. The same body is returned whether or not the address belongs to an account, so the endpoint cannot be used to enumerate customers.
  - `sent` boolean

## Other responses

- `422`: Validation Error
- `429`: Too many reset requests from this client.

---

[API](https://skmtc.dev/advisorppc/apis/advisorppc-api.md) · [All operations](https://skmtc.dev/advisorppc/apis/advisorppc-api/llms.txt) · [OpenAPI document](https://skmtc.dev/advisorppc/apis/advisorppc-api/revisions/3441bd729e0c?raw)