---
title: "Reset password using a reset token"
method: POST
path: "/v1/auth/password/reset"
tags: ["Auth"]
---

# Reset password using a reset token

`POST /v1/auth/password/reset`

## Request

- Base URL: `https://api.lizzflix.xyz` (the document declares no server; this is the origin it was published from)
- URL: `https://api.lizzflix.xyz/v1/auth/password/reset`
- Auth: none declared

Sets the new password, signs the user out everywhere by revoking every existing session, and returns a new session.

## Request body

- object
  - `token` string, required
  - `password` string, required

## Response `200`

Password reset and session created

- SessionEnvelope
  - `ok` true, required
  - `userId` string, required
  - `sessionToken` string, required

## Other responses

- `400`: Bad request
- `500`: The reset could not be saved; nothing changed and the same link can be retried

---

[API](https://skmtc.dev/lizzflix/apis/lizzflix-api.md) · [All operations](https://skmtc.dev/lizzflix/apis/lizzflix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/lizzflix/apis/lizzflix-api/revisions/4536ce9d80ff?raw)