---
title: "Reset the password"
method: POST
path: "/auth/reset-password"
tags: ["Auth"]
---

# Reset the password

`POST /auth/reset-password`

## Request

- Base URL: `https://tasg.app/api/v1`
- URL: `https://tasg.app/api/v1/auth/reset-password`
- Auth: none required

Also invalidates every session AND every personal API token (a credential change is a security event), and marks the email verified.

## Request body

- object
  - `token` string, required
  - `password` string, required: At least 8 chars with an uppercase letter, a lowercase letter, a number and one of `!@#$%^&*`.

## Response `200`

Reset.

- Message
  - `message` string, required

## Other responses

- `400`: Validation failed: the body or query did not match the schema, or a business rule was violated. `error` says which.
- `429`: Too many attempts from this IP. Try again later.

---

[API](https://skmtc.dev/tasg/apis/tasg-api.md) · [All operations](https://skmtc.dev/tasg/apis/tasg-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tasg/apis/tasg-api/revisions/cd2a1dbaf5cf?raw)