---
title: "Update user password"
method: PATCH
path: "/me/password"
tags: ["me"]
---

# Update user password

`PATCH /me/password`

Allows a user to update their password.
- **Authenticated user**: Must use `Bearer <access token>` in Authorization header and provide `currentPassword` in the request body.
- **Password reset user**: Must provide `passwordResetToken` and provide `otpCode` in the request body.

## Request body

- UpdatePasswordRequest
  - `newPassword` string, required — The new password.
  - `currentPassword` string — The user's current password for update password. - This field is only required for authenticated users.
  - `passwordResetToken` string — A temporary Bearer token used for password reset authentication which is issued when a user requests a password reset. - This field is only required for password reset users.
  - `otpCode` string — A one-time passcode (OTP) for reset user password. - Must be a numeric code. - This field is only required for password reset users.

## Response `200`

Successfully updated user password.

## Other responses

- `400` — - [group:**request**, code:**0**]: Invalid field in the request. - [group:**request**, code:**1**]: The request body is required. - [group:**user**, code:**208**]: Invalid otpCode. - [group:**user**, code:**209**]: Expired otpCode. - [group:**user**, code:**211**]: Either `Authorization` in header or `passwordResetToken` in request body must be provided. - [group:**user**, code:**212**]: Invalid currentPassword.
- `401` — - [group:**user**, code:**206**]: Invalid reset password token. - [group:**user**, code:**207**]: Expired reset password token.
- `500` — - [group:**user**, code:**1**]: User does not exist. - [group:**user**, code:**201**]: Get user password reset data encountered error. - [group:**user**, code:**210**]: Delete user password reset data encountered error. - [group:**user**, code:**1200**]: Get user encountered DB error. - [group:**user**, code:**1400**]: Update user passsword encountered DB error.

---

[API](https://skmtc.net/gmicloud/apis/cluster-engine-api.md) · [All operations](https://skmtc.net/gmicloud/apis/cluster-engine-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gmicloud/cluster-engine-api/versions/bcbab016469f/schema)