---
title: "Change (or set) the logged-in user's password"
method: POST
path: "/v2/users/me/password"
tags: ["Users"]
---

# Change (or set) the logged-in user's password

`POST /v2/users/me/password`

## Request

- Base URL: `https://api.chat.ethora.com`
- URL: `https://api.chat.ethora.com/v2/users/me/password`
- Auth: HTTP bearer

**Auth**: User JWT

Accounts with a password: requires `currentPassword`, or a `reauth`
(fresh provider sign-in for the account's own email) in its place,
for users who sign in with Google and do not know it. Accounts without
one (Google / Facebook / Apple / wallet sign-ups) SET a password here
instead and must prove identity first: `reauth` (a fresh provider
sign-in whose email must match the account) or, when MFA is on,
`mfaCode`. Without proof the call answers `409 REAUTH_REQUIRED` with
`details.methods`. On success every other interactive session of the
user is ended (API keys and OAuth grants are kept); the calling
session stays valid.

## Request body

- object
  - `currentPassword` string: Required when the account already has a password.
  - `newPassword` string, required
  - `mfaCode` string: Proof for a password-less account with MFA on (TOTP or backup code).
  - `reauth` object: Proof for a password-less account, a fresh provider sign-in.
    - `provider` 'google' | 'facebook' | 'apple'
    - `idToken` string
    - `accessToken` string
    - `authToken` string

## Response `200`

`{ success: true, sessionsRevoked: number, passwordSet?: true }`

## Other responses

- `400`: Bad Request
- `401`: `WRONG_CREDENTIALS`, `REAUTH_FAILED`, `REAUTH_EMAIL_MISMATCH`, `MFA_CODE_INVALID`
- `403`: Forbidden
- `404`: Not Found
- `409`: `REAUTH_REQUIRED` with `details.methods` (password-less account, no proof given)
- `422`: `VALIDATION_ERROR`, `PASSWORD_UNCHANGED`
- `500`: Internal Server Error

---

[API](https://skmtc.dev/ethora/apis/platform-api.md) · [All operations](https://skmtc.dev/ethora/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ethora/apis/platform-api/revisions/01b6e64378ee?raw)
