---
title: "POST /v1/accounts/{accountId}/resources/{resourceId}/forgottoken"
method: POST
path: "/v1/accounts/{accountId}/resources/{resourceId}/forgottoken"
---

# POST /v1/accounts/{accountId}/resources/{resourceId}/forgottoken

`POST /v1/accounts/{accountId}/resources/{resourceId}/forgottoken`

## Request

- Base URL: `https://api.usa.cloud.watchguard.com/rest/authpoint/authentication`
- URL: `https://api.usa.cloud.watchguard.com/rest/authpoint/authentication/v1/accounts/{accountId}/resources/{resourceId}/forgottoken`
- Auth: API key in header `WatchGuard-API-Key` and HTTP bearer
- TypeScript: <https://skmtc.dev/watchguard/apis/authpoint-authentication-api/docs/v1/accounts/:accountId/resources/:resourceId/forgottoken/post.ts> (a function with typed inputs; its response is checked against the schema)

Validates the Forgot Token Verification Code and enables Forgot Token mode for the user.

## Path parameters

- `accountId` string, required
- `resourceId` number, required

## Request body

- ForgotTokenActivationRequest: The request body to activate the forgot token
  - `login` string, required: Identifies the user to validate. This must be the email address or the user name of the user to validate.
  - `password` string, required: The password of the user to be validated. It must be filled in clear text.
  - `verificationCode` string, required: The Verification Code is the six digit value generated in the AuthPoint management UI and provided to the user by the operator. The user must provide this value.
  - `activationCode` string, required: The Activation Code value generated by the client application. This value can be any six digit string that consists of only numbers. This value must be visible to the end user so they can provide it to the AuthPoint operator.
  - `interval` number, required: The interval, in hours, that Forgot Token is active for the user. This value is defined by an operator in the AuthPoint management UI and provided to the user.

## Response `200`

Forgot token activated

- ForgotTokenActivationResponse: The forgot token activation response
  - `authenticationResult` 'AUTHORIZED': The activation result

## Other responses

- `400`: Bad request
- `403`: Activation not authorized
- `404`: Resource or user not found

---

[API](https://skmtc.dev/watchguard/apis/authpoint-authentication-api.md) - [All operations](https://skmtc.dev/watchguard/apis/authpoint-authentication-api/llms.txt) - [OpenAPI document](https://skmtc.dev/watchguard/apis/authpoint-authentication-api/revisions/d0a6623e53ce?raw)