---
title: "Reset Password"
method: POST
path: "/api/auth/password/reset"
---

# Reset Password

`POST /api/auth/password/reset`

Forgot-password / OTP reset. Prove ownership of the registered phone or
email with the OTP it received (reuses the SMS/email OTP that already backs
login), then set a new password — NO auth token and NO old password needed.
Returns {token, user} so the SPA can drop straight into a logged-in session.
The same endpoint backs the Settings "用验证码改密" path.

## Request body

- ResetPasswordIn
  - `phone` string, nullable
  - `email` string, nullable
  - `code` string, required
  - `new_password` string, required

## Response `200`

Successful Response

- object

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/omicos/apis/omicos-server.md) · [All operations](https://skmtc.dev/omicos/apis/omicos-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/omicos/omicos-server/revisions/a00b94573ffe/schema)