---
title: "Forget Password"
method: POST
path: "/auth/v1/web/password/forget"
---

# Forget Password

`POST /auth/v1/web/password/forget`

Lets you set a new password if the customer has lost or forgot password. This is applicable only for brands for which password is enabled. You need to first generate sessionId and then use it in password/forget. After setting a new password, the customer customer needs to authenticate again - 

1. Generate token, 
2. Generate OTP, and 
3. Validate OTP.

## Request body

- object
  - `identifierType` string, required — Identifier used for token generation. Values: MOBILE, EMAIL, USERNAME.
  - `identifierValue` string, required — Value of the specified identifierType.
  - `brand` string, required — Name of the brand/org for which authentication needs to be verified.
  - `deviceId` string — Unique ID of the device used for changing password. Applicable only for mobile app.
  - `sessionId` string, required — Unique sessionId generated for the identifierType and deviceId combination.
  - `password` string, required — New password for the account.
  - `confirmPassword` string, required — Reenter the new password.

## Response `200`

200

- object
  - `status` object
    - `success` boolean
    - `code` integer
    - `message` string

## Other responses

- `400` — 400

---

[API](https://skmtc.net/capillarytech/apis/sample-api.md) · [All operations](https://skmtc.net/capillarytech/apis/sample-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/capillarytech/sample-api/revisions/de241f2ed9b3/schema)