---
title: "Create Password Recovery"
method: POST
path: "/account/recovery"
tags: ["account"]
---

# Create Password Recovery

`POST /account/recovery`

Sends the user an email with a temporary secret key for password reset. When the user clicks the confirmation link he is redirected back to your app password reset URL with the secret key and email address values attached to the URL query string. Use the query string params to submit a request to the [PUT /account/recovery](/docs/client/account#accountUpdateRecovery) endpoint to complete the process. The verification link sent to the user's email address is valid for 1 hour.

## Request body

- object
  - `email` string, required — User email.
  - `url` string, required — URL to redirect the user back to your app from the recovery email. Only URLs from hostnames in your project platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.

## Response `201`

Token

- Token — Token
  - `$id` string, required — Token ID.
  - `expire` integer, required — Token expiration date in Unix timestamp.
  - `secret` string, required — Token secret key. This will return an empty string unless the response is returned using an API key or as part of a webhook payload.
  - `userId` string, required — User ID.

---

[API](https://skmtc.net/appwrite/apis/client.md) · [All operations](https://skmtc.net/appwrite/apis/client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/appwrite/client/versions/b1c00a0bc3fb/schema)