---
title: "Reset Password"
method: POST
path: "/v1/auth/reset"
---

# Reset Password

`POST /v1/auth/reset`

## Request

- Base URL: `https://api.quantradin.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.quantradin.com/v1/auth/reset`
- Auth: none declared

Complete a password reset with a token + a new password (8–72 bytes).

On success: rotates the password, invalidates any OTHER unused reset
tokens the user still holds (MINOR-2 — defense in depth against a stale
but still-valid link from an earlier "forgot" click), REVOKES ALL of the
user's sessions (every existing cookie dies), consumes the presented token
(single-use), and returns {"ok": true}.  A missing/expired/already-used
token → 400 (generic).

## Request body

- ResetBody
  - `token` string, required
  - `password` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/quantradin/apis/vega-api.md) · [All operations](https://skmtc.dev/quantradin/apis/vega-api/llms.txt) · [OpenAPI document](https://skmtc.dev/quantradin/apis/vega-api/revisions/47add154ef38?raw)