---
title: "Start updating the current email address"
method: POST
path: "/zephr/users/update-email"
tags: ["Authentication"]
---

# Start updating the current email address

`POST /zephr/users/update-email`

## Request

- Base URL: `https://demo-site`
- URL: `https://demo-site/zephr/users/update-email`
- Auth: one of:
  - API key in cookie `blaize_session`
  - API key in query parameter `jwt`
  - API key in header `x-blaize-jwt`
  - API key in header `x-zephr-jwt`
  - HTTP bearer
  - API key in cookie `blaize_jwt`

Updates the user's email address. The user will receive an email with a one-time password (OTP) to verify the new email address. In order to finish the process, the user must provide the OTP to the _/zephr/users/update-email/{otp}_ endpoint. The difference between this endpoint and the _/blaize/users/update-email_ endpoint is that this endpoint requires the extra layer of authentication through the required validator.

## Request body

- StartUpdateYourCurrentZephrEmailAddressRequest
  - `current_identifiers` Identifiers, required
    - `email_address` string
  - `new_identifiers` Identifiers, required
    - `email_address` string
  - `validators` Validators, required
    - `password` string
    - `use_sso` boolean: When this is present there should be no identifiers in the body. The user is identified through a blaize_session cookie.

## Response `200`

OK. The confirmation email was sent successfully.

- object
  - `message` string

## Other responses

- `400`: Bad Request. Returned if the provided email is invalid.
- `401`: Unauthorized. Returned if the provided validator is invalid.
- `404`: Not Found. Returned if the user is not found.

---

[API](https://skmtc.dev/zuora/apis/zuora-2.md) - [All operations](https://skmtc.dev/zuora/apis/zuora-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zuora/apis/zuora-2/revisions/678190d04c40?raw)