---
title: "Changes to Reset password using a recovery token"
method: POST
path: "/auth/recovery/reset"
---

# Changes to Reset password using a recovery token

`POST /auth/recovery/reset`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 5 of 82 revisions.

- **2026-10-01** `e1e4b18d0319`: 1 breaking, 1 warning, 4 info
- **2026-10-01** `79d6f267772a`: 1 info
- **2026-05-01** `39082d385dda`: 3 breaking, 4 warning, 5 info
- **2025-08-11** `db719f9e3d34`: 2 breaking, 9 info
- **2025-04-20** `b97ec6888b3c`: 4 breaking, 2 warning, 9 info

## Changes

- **2026-10-01** `e1e4b18d0319`: 1 breaking, 1 warning, 4 info
  - removed the required property `success` from the response with the `500` status
  - removed the optional property `data` from the response with the `500` status
  - added the non-success response with the status `400`
  - added the non-success response with the status `404`
  - added the non-success response with the status `429`
  - added the required property `status` to the response with the `500` status
- **2026-10-01** `79d6f267772a`: 1 info
  - added the required property `data` to the response with the `200` status
- **2026-05-01** `39082d385dda`: 3 breaking, 4 warning, 5 info
  - the `password` request property's minLength was increased from `0` to `8`
  - the `recoveryToken` request property's minLength was increased from `0` to `1`
  - added the pattern `^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[!?@#$%^&*()\-_=+[\]{};:'",.~`|\\/])[A-Za-z0-9!?@#$%^&*()\-_=+[\]{};:'",.~`|\\/]+$` to the request property `password`
  - removed the optional property `data` from the response with the `200` status
  - removed the optional property `details` from the response with the `500` status
  - added the new `false` enum value to the `success` response property for the response status `500`
  - added the new `true` enum value to the `success` response property for the response status `200`
  - added the new optional request property `confirm`
  - request body became optional
  - the `password` request property format was generalized from `password` to no format
  - removed the non-success response with the status `400`
  - added the optional property `data` to the response with the `500` status
- **2025-08-11** `db719f9e3d34`: 2 breaking, 9 info
  - request body became required
  - the `password` request property format changed from no format to `password`
  - added the non-success response with the status `400`
  - removed the non-success response with the status `422`
  - added the optional property `details` to the response with the `500` status
  - the response property `msg` became required for the status `200`
  - the response property `msg` became required for the status `500`
  - the response property `success` became required for the status `200`
  - the response property `success` became required for the status `500`
  - the `success` response's property default value `false` was removed for the status `500`
  - the `success` response's property default value `true` was removed for the status `200`
- **2025-04-20** `b97ec6888b3c`: 4 breaking, 2 warning, 9 info
  - the response property `msg` became optional for the status `200`
  - the response property `msg` became optional for the status `500`
  - the response property `success` became optional for the status `200`
  - the response property `success` became optional for the status `500`
  - removed the request property `confirm`
  - removed the optional property `data` from the response with the `500` status
  - the `password` request property's minLength was decreased from `8` to `0`
  - the `recoveryToken` request property's minLength was decreased from `1` to `0`
  - removed the pattern `^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[!?@#$%^&*()\-_=+[\]{};:'",.~`|\\/])[A-Za-z0-9!?@#$%^&*()\-_=+[\]{};:'",.~`|\\/]+$` from the request property `password`
  - added the non-success response with the status `422`
  - added the optional property `data` to the response with the `200` status
  - the `success` response's property default value `false` was added for the status `500`
  - the `success` response's property default value `true` was added for the status `200`
  - removed the `false` enum value from the `success` response property for the response status `500`
  - removed the `true` enum value from the `success` response property for the response status `200`

---

[Operation](https://skmtc.dev/bluewave-labs/apis/checkmate-api/docs/auth/recovery/reset/post.md) - [API](https://skmtc.dev/bluewave-labs/apis/checkmate-api.md) - [Page](https://skmtc.dev/bluewave-labs/apis/checkmate-api/changes/auth/recovery/reset/post)