---
title: "Change the password and rotate the current session"
method: PATCH
path: "/auth/password"
tags: ["Auth"]
---

# Change the password and rotate the current session

`PATCH /auth/password`

## Request

- Base URL: `https://api.flashdata.dev/v2`
- URL: `https://api.flashdata.dev/v2/auth/password`
- Auth: API key in cookie `__Host-fd_session` and API key in header `X-CSRF-Token`

## Request body

- object
  - `currentPassword` string, required
  - `newPassword` string, required
  - `revokeOtherSessions` boolean

## Response `204`

Password changed; current session rotated and other sessions revoked when requested

## Other responses

- `401`: Authentication required or invalid
- `403`: Authenticated but not permitted, or CSRF validation failed
- `422`: Request validation failed

---

[API](https://skmtc.dev/flashdata/apis/flashdata-customer-api.md) · [All operations](https://skmtc.dev/flashdata/apis/flashdata-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/flashdata/apis/flashdata-customer-api/revisions/109179fe9313?raw)