---
title: "Change Password URL"
method: GET
path: "/.well-known/change-password"
tags: ["frontend"]
---

# Change Password URL

`GET /.well-known/change-password`

## Request

- Base URL: `/` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/.well-known/change-password`
- Auth: none declared

This endpoint implements the W3C "change password URL" well-known location by
redirecting the browser to the configured settings UI. Password managers follow
this redirect to take users straight to the page where they can change their
password.

## Response `default`

errorGeneric

- ErrorGeneric: The standard Ory JSON API error format.
  - `error` GenericError, required
    - `code` integer: The status code
    - `debug` string: Debug information This field is often not exposed to protect against leaking sensitive information.
    - `details` object: Further error details
    - `id` string: The error ID Useful when trying to identify various errors in application logic.
    - `message` string, required: Error message The error's message.
    - `reason` string: A human-readable reason for the error
    - `request` string: The request ID The request ID is often exposed internally in order to trace errors across service architectures. This is often a UUID.
    - `status` string: The status description

## Other responses

- `303`: Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is typically 204.

## Changes

- **2026-06-16** `3a8d07bbb515`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ory/apis/ory-kratos/changes/.well-known/change-password/get.md)

---

[API](https://skmtc.dev/ory/apis/ory-kratos.md) - [All operations](https://skmtc.dev/ory/apis/ory-kratos/llms.txt) - [OpenAPI document](https://skmtc.dev/ory/apis/ory-kratos/revisions/cc87f41fbd6d?raw)