---
title: "Sets a new password using the token from the password reset email."
method: POST
path: "/api/auth/reset-password"
tags: ["auth"]
---

# Sets a new password using the token from the password reset email.

`POST /api/auth/reset-password`

## Request

- Base URL: `https://api.pricklymails.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pricklymails.com/api/auth/reset-password`
- Auth: none declared

Returns `204` on success.

## Request body

- ResetPasswordRequest: Request body for `POST /api/auth/reset-password`.
  - `new_password` string, required: The new password, subject to the same rules as at registration.
  - `token` string, required: The reset token from the password reset email.

## Response `204`

Password changed.

## Other responses

- `400`: New password fails the password policy.
- `401`: Reset token invalid, expired, or already used.
- `404`: No account matches the reset token.

---

[API](https://skmtc.dev/pricklymails/apis/pricklymails-api.md) · [All operations](https://skmtc.dev/pricklymails/apis/pricklymails-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pricklymails/apis/pricklymails-api/revisions/b70041c8f710?raw)