---
title: "Request a password reset link"
method: POST
path: "/v1/auth/password/forgot"
tags: ["Auth"]
---

# Request a password reset link

`POST /v1/auth/password/forgot`

## Request

- Base URL: `https://api.briefgate.dev`
- URL: `https://api.briefgate.dev/v1/auth/password/forgot`
- Auth: none required

Always answers 202, whether or not the address has an account — otherwise this becomes a way to enumerate accounts, the same reasoning as /v1/auth/verification/resend. The link mailed out carries a single-use token that expires in an hour.

## Request body

- ForgotPassword
  - `email` string, email, required

## Response `202`

Accepted — says nothing about whether an account exists

## Other responses

- `403`: Too many attempts
- `422`: Validation error — the body shape is correct but values are invalid

---

[API](https://skmtc.dev/briefgate/apis/briefgate-api.md) · [All operations](https://skmtc.dev/briefgate/apis/briefgate-api/llms.txt) · [OpenAPI document](https://skmtc.dev/briefgate/apis/briefgate-api/revisions/b21afed4748b?raw)