---
title: "Reset Password"
method: POST
path: "/api/v1/auth/password/reset"
tags: ["authentication"]
---

# Reset Password

`POST /api/v1/auth/password/reset`

## Request

- Base URL: `https://memory.kagura-ai.com` (the document declares no server; this is the origin it was published from)
- URL: `https://memory.kagura-ai.com/api/v1/auth/password/reset`
- Auth: none declared

Set a new password from a reset link; sign out every browser session.

Returns 204; the person then signs in with the new password. 400 for an
unknown, expired or used link; 422 when the password breaks the policy.
The owner is emailed a security notice once the reset has committed.

## Request body

- PasswordLinkBody: Body for POST /auth/password/reset and /auth/password/setup. No ``max_length`` on ``new_password``: the policy check answers an over-long password with its own message (bcrypt's 72-byte limit).
  - `token` string, required
  - `new_password` string, required

## Response `204`

Successful Response

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud.md) · [All operations](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/llms.txt) · [OpenAPI document](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/revisions/09f17f5ada29?raw)