---
title: "Complete a password reset"
method: POST
path: "/forgot_password/confirm"
tags: ["Authentication"]
---

# Complete a password reset

`POST /forgot_password/confirm`

## Request

- Base URL: `https://api.indexone.io`
- URL: `https://api.indexone.io/forgot_password/confirm`
- Auth: API key in header `x-api-key`

Sets a new password using the code emailed by `POST /forgot_password`.

## Request body

- object
  - `username` string, email, required
  - `password` string, required: The new password.
  - `confirmation_code` string, required

## Response `200`

Password changed. The body is the raw (empty) Cognito response.

- object

## Other responses

- `400`: Wrong or expired code, or the new password violates the Cognito policy.
- `403`: Missing or invalid `x-api-key`.
- `429`: API key usage-plan rate limit exceeded.

---

[API](https://skmtc.dev/indexone/apis/index-one-rest-api.md) · [All operations](https://skmtc.dev/indexone/apis/index-one-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/indexone/apis/index-one-rest-api/revisions/df5a92216a9c?raw)