---
title: "Change Password"
method: POST
path: "/auth/change-password"
tags: ["auth"]
---

# Change Password

`POST /auth/change-password`

## Request

- Base URL: `https://api.verdun.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.verdun.ai/auth/change-password`
- Auth: HTTP bearer

## Request body

- ChangePasswordRequest: A signed-in operator changing their own password. Cognito verifies `current_password` against the caller's access token, so this can only ever change the caller's own password — no target is (or can be) named.
  - `current_password` string, required: The operator's current password (verified by Cognito)
  - `new_password` string, required: The operator's chosen new password

## Response `200`

Successful Response

- MessageResponse: A minimal human-readable acknowledgement for endpoints that intentionally return no data (e.g. the password-reset flow, which stays non-enumerating — the same message is returned whether or not the account exists).
  - `message` string, required: Human-readable result of the request.

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/verdun/apis/verdun-api.md) - [All operations](https://skmtc.dev/verdun/apis/verdun-api/llms.txt) - [OpenAPI document](https://skmtc.dev/verdun/apis/verdun-api/revisions/00252d8227c1?raw)