---
title: "Reset Password"
method: POST
path: "/v1/users/reset-password"
tags: ["Authentication"]
---

# Reset Password

`POST /v1/users/reset-password`

Consumes a single-use reset token and changes the user's password.
On success, all existing sessions for the user are revoked.

## Request body

- V1ResetPasswordRequest
  - `password` string, required
  - `token` string, required

## Response `204`

No Content

## Other responses

- `400` — invalid request body, password shorter than the minimum length, or token that is invalid / expired / already used
- `403` — demo mode is enabled or local login is disabled
- `500` — internal error while processing the request

## Changes

- **2026-05-16** `c267eb641fc1` — 1 info
  - endpoint added
- **2024-11-29** `19794fb70c24` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/sysadminsmedia/apis/homebox-api/changes/v1/users/reset-password/post.md)

---

[API](https://skmtc.dev/sysadminsmedia/apis/homebox-api.md) · [All operations](https://skmtc.dev/sysadminsmedia/apis/homebox-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sysadminsmedia/homebox-api/revisions/f19934d1b3ab/schema)