---
title: "Reset password"
method: POST
path: "/api/auth/reset-password"
tags: ["Auth"]
---

# Reset password

`POST /api/auth/reset-password`

## Request body

- ResetPasswordRequest — Request body for password reset confirmation
  - `new_password` string, required — New password (minimum 8 characters)
  - `token` string, required — Password reset token

## Response `200`

Password reset successful

- ResetPasswordResponse — Response for successful password reset
  - `message` string, required — Success message

## Other responses

- `400` — Invalid token or password

## Changes

- **2025-09-01** `a2488be8a6e4` — 2 breaking, 2 warning, 2 info
  - added the new required request property `new_password`
  - removed the media type `application/json` for the response with the status `400`
  - removed the request property `newPassword`
  - removed the request property `userId`
  - …2 more

[Change history](https://skmtc.dev/patroninc/apis/patron-api/changes/api/auth/reset-password/post.md)

---

[API](https://skmtc.dev/patroninc/apis/patron-api.md) · [All operations](https://skmtc.dev/patroninc/apis/patron-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/patroninc/patron-api/revisions/a2488be8a6e4/schema)