---
title: "Send a password reset email"
method: POST
path: "/v1/users/send_password_reset_email"
tags: ["User"]
---

# Send a password reset email

`POST /v1/users/send_password_reset_email`

Sends a Firebase password-reset link to the given email. **No authentication
required** (`security: []`) — it is called from the public "forgot password"
flow. It is not company-scoped.

To avoid account enumeration the endpoint always responds `{ success: true }`
when the email is unknown or when Firebase rejects it. Rate-limited to 1
request per minute.

## Request body

- object
  - `email` string, email, required
  - `continue_url` string, uri — Optional URL to redirect to after the reset is completed.

## Response `200`

Reset email queued (or silently ignored for unknown emails).

- object
  - `success` boolean

## Other responses

- `400` — Unexpected error while sending the reset email.
- `412` — `email` is required.

---

[API](https://skmtc.dev/cardda/apis/banking-api.md) · [All operations](https://skmtc.dev/cardda/apis/banking-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cardda/banking-api/revisions/ff1aeb3fda8b/schema)