---
title: "Change Password"
method: POST
path: "/api/auth/change-password"
tags: ["auth"]
---

# Change Password

`POST /api/auth/change-password`

## Request

- Base URL: `https://board.noddle.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://board.noddle.dev/api/auth/change-password`
- Auth: none declared

Rotate the account password. Wrong current password → 401; new password
shorter than 8 chars → 400. Every OTHER session is revoked (the caller's
own cookie stays valid); the event is audit-logged.

## Request body

- ChangePasswordBody
  - `current_password` string, required
  - `new_password` string, required

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/noddle/apis/noddle-board.md) · [All operations](https://skmtc.dev/noddle/apis/noddle-board/llms.txt) · [OpenAPI document](https://skmtc.dev/noddle/apis/noddle-board/revisions/7f324e389516?raw)
