---
title: "Reset a user's password (admin only)"
method: POST
path: "/users/admin/reset-password"
tags: ["Users"]
---

# Reset a user's password (admin only)

`POST /users/admin/reset-password`

Resets another user's password. Data is preserved for users whose encryption key has been migrated to the system wrap. Users who never logged in since the encryption upgrade require confirmDataWipe, which deletes their encrypted data.

## Request body

- object
  - `userId` string
  - `username` string
  - `newPassword` string, required
  - `confirmDataWipe` boolean

## Response `200`

Password reset; dataWiped indicates whether encrypted data was deleted.

## Other responses

- `400` — Missing or invalid parameters.
- `403` — Admin access required.
- `404` — User not found.
- `409` — Reset would wipe the user's data and confirmDataWipe was not set.
- `500` — Failed to reset password.

---

[API](https://skmtc.dev/termix/apis/termix-api.md) · [All operations](https://skmtc.dev/termix/apis/termix-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/termix/termix-api/revisions/f4ef343eff1b/schema)