---
title: "Consume reset token, set new password, revoke all sessions"
method: POST
path: "/v1/reset-password"
tags: ["auth"]
---

# Consume reset token, set new password, revoke all sessions

`POST /v1/reset-password`

## Request

- Base URL: `https://api.travelminds.ai`
- URL: `https://api.travelminds.ai/v1/reset-password`
- Auth: none declared

Accepts a reset token + new password. On success: hashes the new password with Argon2id, clears the reset token, and revokes ALL active sessions for the account (forces re-login from every device — best practice after credential rotation).

## Request body

- ResetPasswordBody
  - `token` string, required
  - `new_password` string, required

## Response `200`

Successful Response

- ResetPasswordResponse
  - `reset` boolean
  - `email` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/travelminds/apis/travelmindsai-api-gateway.md) · [All operations](https://skmtc.dev/travelminds/apis/travelmindsai-api-gateway/llms.txt) · [OpenAPI document](https://skmtc.dev/travelminds/apis/travelmindsai-api-gateway/revisions/d05c8634e340?raw)