---
title: "Initating a password reset"
method: POST
path: "/v1/users/reset/initiate"
tags: ["Users"]
---

# Initating a password reset

`POST /v1/users/reset/initiate`

Anybody can initate a reset of any user's password. An email will be sent with instructions on how to complete the password reset; it contains a token that is required to complete the process.

The optional query parameter `invalidate` may be set to `true` to immediately invalidate the user's current password, regardless of whether they complete the reset process. This can be done if, for example, their password has been compromised. In order to do this, though, the request must be performed as an authenticated user with permission to do this. If invalidation is attempted without the proper permissions, the entire request will fail.

If the email address provided does not match any user in the system, that address will still be sent an email informing them of the attempt and that no account was found.

## Query parameters

- `invalidate` boolean

## Response `200`

OK

- Success
  - `success` boolean, required

## Changes

- **2025-12-20** `022694254f0d` — 1 info
  - api operation id `Initating a password reset` removed and replaced with `initatePasswordReset`
- **2025-10-27** `b11b54eea487` — 1 info
  - removed the non-success response with the status `403`
- **2025-03-13** `e8c2858fd4eb` — 2 info
  - api operation id `initatePasswordReset` removed and replaced with `Initating a password reset`
  - added the non-success response with the status `403`

[Change history](https://skmtc.dev/getodk/apis/odk-central-api/changes/v1/users/reset/initiate/post.md)

---

[API](https://skmtc.dev/getodk/apis/odk-central-api.md) · [All operations](https://skmtc.dev/getodk/apis/odk-central-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/getodk/odk-central-api/revisions/dc3ccc706398/schema)