---
title: "Changes the user's password after verifying the current one."
method: PATCH
path: "/api/users/{uuid}/password"
tags: ["account"]
---

# Changes the user's password after verifying the current one.

`PATCH /api/users/{uuid}/password`

## Request

- Base URL: `https://api.pricklymails.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pricklymails.com/api/users/{uuid}/password`
- Auth: HTTP bearer

## Path parameters

- `uuid` string, required

## Request body

- ChangePasswordRequest: Request body for `PATCH /api/users/:uuid/password`.
  - `current_password` string, required: The current password.
  - `new_password` string, required: The new password, subject to the same rules as at registration.

## Response `204`

Password changed.

## Other responses

- `400`: Invalid new password or wrong current password.
- `401`: Missing or invalid JWT.
- `403`: Caller is not permitted to change this user's password.
- `404`: No user with this UUID.

---

[API](https://skmtc.dev/pricklymails/apis/pricklymails-api.md) · [All operations](https://skmtc.dev/pricklymails/apis/pricklymails-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pricklymails/apis/pricklymails-api/revisions/b4225a92d8fb?raw)