---
title: "Legacy password setup route; email verification required"
method: POST
path: "/v1/account/set-password"
tags: ["account"]
---

# Legacy password setup route; email verification required

`POST /v1/account/set-password`

## Request

- Base URL: `https://api.getmyhotels.com`
- URL: `https://api.getmyhotels.com/v1/account/set-password`
- Auth: HTTP bearer

Retained for older clients. Returns PRECONDITION_FAILED: a signed-in session alone cannot establish a password. Use POST /api/auth/request-password-reset and complete the emailed link through POST /api/auth/reset-password to set the first password or replace a forgotten one. Password reset revokes existing sessions.

## Request body

- object
  - `newPassword` string, required

## Response `200`

Success

- unknown

## Other responses

- `400`: Request validation failed or the router rejected the input
- `401`: Missing or invalid bearer session token
- `426`: Reported X-GMH-App-Version is below the supported minimum — the app must update
- `500`: Unexpected server error (opaque; details stay in logs)

---

[API](https://skmtc.dev/getmyhotels/apis/getmyhotels-rest-api.md) · [All operations](https://skmtc.dev/getmyhotels/apis/getmyhotels-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getmyhotels/apis/getmyhotels-rest-api/revisions/cba24a9c13f0?raw)