---
title: "Check if a password meets the password policy"
method: POST
path: "/api/sign-in-exp/default/check-password"
tags: ["Sign-in experience"]
---

# Check if a password meets the password policy

`POST /api/sign-in-exp/default/check-password`

Check if a password meets the password policy in the sign-in experience settings.

## Request body

- object
  - `password` string, required — The password to check.
  - `userId` string — The user ID to check the password for. It is required if rejects user info is enabled in the password policy.

## Response `200`

The password meets the password policy.

- union
  - object
    - `result` boolean, required
  - object
    - `result` boolean, required
    - `issues` object[], required
      - `code` string, required
      - `interpolation` object

## Other responses

- `400` — The password does not meet the password policy or no user ID provided.
- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/0287c6a59eba/schema)