---
title: "POST /verifyPassword"
method: POST
path: "/verifyPassword"
tags: ["relyingparty"]
---

# POST /verifyPassword

`POST /verifyPassword`

Verifies the user entered password.

## Request body

- IdentitytoolkitRelyingpartyVerifyPasswordRequest — Request to verify the password.
  - `tenantProjectNumber` string, uint64 — Tenant project number to be used for idp discovery.
  - `email` string — The email of the user.
  - `captchaChallenge` string — The captcha challenge.
  - `delegatedProjectNumber` string, int64 — GCP project number of the requesting delegated app. Currently only intended for Firebase V1 migration.
  - `idToken` string — The GITKit token of the authenticated user.
  - `password` string — The password inputed by the user.
  - `tenantId` string — For multi-tenant use cases, in order to construct sign-in URL with the correct IDP parameters, Firebear needs to know which Tenant to retrieve IDP configs from.
  - `captchaResponse` string — Response to the captcha.
  - `returnSecureToken` boolean — Whether return sts id token and refresh token instead of gitkit token.
  - `instanceId` string — Instance id token of the app.
  - `pendingIdToken` string — The GITKit token for the non-trusted IDP, which is to be confirmed by the user.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/identitytoolkit.md) · [All operations](https://skmtc.net/google/apis/identitytoolkit/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/identitytoolkit/revisions/9ea63f196a10/schema)