---
title: "Hosted password-reset page"
method: GET
path: "/auth/reset-password"
tags: ["Auth Pages"]
---

# Hosted password-reset page

`GET /auth/reset-password`

## Request

- Base URL: `https://api.hiyd.ai`
- URL: `https://api.hiyd.ai/auth/reset-password`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Landing page for the link in hiyd's password-reset email. It has its own path, rather than /auth/action, because Android App Links can't filter on the query string: keeping reset links off /auth/action lets the app claim that path for verification links while reset links stay in the browser. A link whose `mode` is something other than resetPassword is redirected to /auth/action with its query intact.

## Query parameters

- `mode` string
- `oobCode` string

## Response `200`

The password-reset page

## Other responses

- `302`: Not a reset link; redirected to /auth/action

---

[API](https://skmtc.dev/hiyd/apis/hiyd-backend-api.md) - [All operations](https://skmtc.dev/hiyd/apis/hiyd-backend-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hiyd/apis/hiyd-backend-api/revisions/23598d347e1b?raw)