---
title: "Send a password reset email"
method: POST
path: "/v1/users/send_password_reset_email"
tags: ["User"]
---

# Send a password reset email

`POST /v1/users/send_password_reset_email`

## Request

- Base URL: `https://api.cardda.com`
- URL: `https://api.cardda.com/v1/users/send_password_reset_email`
- Auth: none required

Sends a Firebase password-reset link to the given email. **No authentication
required** (`security: []`) — it is called from the public "forgot password"
flow. It is not company-scoped.

To avoid account enumeration the endpoint always responds `{ success: true }`
when the email is unknown or when Firebase rejects it. Rate-limited to 1
request per minute.

## Request body

- object
  - `email` string, email, required
  - `continue_url` string, uri: Optional URL to redirect to after the reset is completed.

## Response `200`

Reset email queued (or silently ignored for unknown emails).

- object
  - `success` boolean

## Other responses

- `400`: Unexpected error while sending the reset email.
- `412`: `email` is required.

---

[API](https://skmtc.dev/cardda/apis/organization-api.md) - [All operations](https://skmtc.dev/cardda/apis/organization-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cardda/apis/organization-api/revisions/32a4430278a8?raw)