---
title: "Confirm Password Reset"
method: POST
path: "/v1/auth/password-reset/confirm"
tags: ["auth", "auth"]
---

# Confirm Password Reset

`POST /v1/auth/password-reset/confirm`

## Request

- Base URL: `https://api.elaan.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.elaan.io/v1/auth/password-reset/confirm`
- Auth: none declared

Redeem the link and set the new password. The link is consumed on success,
so a second POST 422s. Note existing access tokens are NOT revoked — they are
stateless and stay valid until they expire; see CLAUDE.md.

## Request body

- ResetPasswordRequest
  - `token` string, required
  - `password` string, required

## Response `204`

Successful Response

## Other responses

- `422`: Invalid or expired reset link, or a weak password

---

[API](https://skmtc.dev/elaan/apis/elaan-api.md) · [All operations](https://skmtc.dev/elaan/apis/elaan-api/llms.txt) · [OpenAPI document](https://skmtc.dev/elaan/apis/elaan-api/revisions/c96a7e6399aa?raw)