---
title: "Hs Password"
method: POST
path: "/api/asclepius/hs/password"
tags: ["asclepius-provider"]
---

# Hs Password

`POST /api/asclepius/hs/password`

## Request

- Base URL: `https://app.archangelhealth.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.archangelhealth.ai/api/asclepius/hs/password`
- Auth: none declared

Forced first-login reset (and normal change). On the FORCED reset the
session cookie is proof of identity (the temp passphrase was consumed at
login); a NORMAL change requires the current password.

Changing the password invalidates every session issued against the old one
(the ``se`` epoch claim), so this re-issues the caller's own cookie — otherwise
the user would be signed out by their own password change.

## Request body

- HsPasswordRequest
  - `current_password` string, nullable
  - `new_password` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform.md) - [All operations](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform/llms.txt) - [OpenAPI document](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform/revisions/3514f4e119da?raw)