---
title: "Change user password"
method: POST
path: "/user/password"
tags: ["user"]
---

# Change user password

`POST /user/password`

Change the user's password. The user must be authenticated with elevated permissions or provide a valid password reset ticket.

All of the user's existing sessions are revoked atomically as part of this operation, including the session used to make the request. Clients must treat the user as signed out after a successful response and obtain a new session via sign-in.

## Request body

- UserPasswordRequest
  - `newPassword` string, required — A password of minimum 3 characters
  - `ticket` string — Ticket to reset the password, required if the user is not authenticated

## Response `200`

Password changed successfully

- 'OK'

## Other responses

- `default` — An error occurred while processing the request

---

[API](https://skmtc.net/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.net/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/versions/a5c0d88b55c4/schema)