---
title: "Change Password"
method: POST
path: "/auth/change-password"
tags: ["auth"]
---

# Change Password

`POST /auth/change-password`

## Request

- Base URL: `https://api.tickertrac.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.tickertrac.com/auth/change-password`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

Change a password, or add the first one to a Google or Apple account.

An existing password must be confirmed. The change signs out every other session, and
the fresh token returned here keeps this one signed in. A wrong current password is a
400, not a 401: the client reads 401 as "your session ended" and would sign out.

## Request body

- ChangePasswordRequest
  - `current_password` string, nullable
  - `new_password` string, required

## Response `200`

Successful Response

- TokenResponse
  - `access_token` string, required
  - `token_type` string
  - `api_key` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tickertrac/apis/tickerrag-api.md) · [All operations](https://skmtc.dev/tickertrac/apis/tickerrag-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tickertrac/apis/tickerrag-api/revisions/3c7eb0f6425d?raw)