---
title: "Validate Password"
method: POST
path: "/auth/v1/web/password/validate"
---

# Validate Password

`POST /auth/v1/web/password/validate`

Validates the password of an existing user account and generates the access token and key. The token is valid for 15 minutes by default. You can use the key to regenerate token.

## Request body

- object
  - `identifierType` string, required — Identifier used for token generation. Values: MOBILE, EMAIL, USERNAME.
  - `identifierValue` string, required — Value of the specified identifierType.
  - `brand` string, required — Name of the brand/org for which authentication needs to be verified.
  - `deviceId` string, required — Unique ID of the device from which the customer has generated the token.
  - `sessionId` string, required — Session ID generated through the `v1/token/generate` API.
  - `password` string, required — Account password to validate.

## Response `200`

200

- object
  - `status` object
    - `success` boolean
    - `code` integer
    - `message` string
  - `auth` object
    - `token` string
    - `key` string
  - `user` object
    - `appRegistered` boolean
    - `sessionId` unknown
    - `role` string
    - `userRegisteredForPassword` boolean

## Other responses

- `400` — 400

---

[API](https://skmtc.net/capillarytech/apis/sample-api.md) · [All operations](https://skmtc.net/capillarytech/apis/sample-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/capillarytech/sample-api/revisions/de241f2ed9b3/schema)