---
title: "Send password reset (code or link based on config)"
method: POST
path: "/api/auth/email/send-reset-password"
tags: ["Client"]
---

# Send password reset (code or link based on config)

`POST /api/auth/email/send-reset-password`

Send password reset email using the method configured in auth settings (resetPasswordMethod). When method is 'code', sends a 6-digit numeric code for two-step flow. When method is 'link', sends a browser reset link that goes through an InsForge backend endpoint first. Prevents user enumeration by returning success even if email doesn't exist.

## Request body

- object
  - `email` string, email, required
  - `redirectTo` string, uri — Used for link-based password reset. The email link always opens an InsForge backend endpoint first; InsForge then redirects the browser to this URL with the reset token in the query string. This URL must be included in allowedRedirectUrls. Recommended: use your app's dedicated reset-password page.

## Response `202`

Password reset email sent (if email exists). Message varies based on configured method.

- object
  - `success` boolean
  - `message` string

## Other responses

- `400` — Invalid request

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)