---
title: "Changes the user's password"
method: PUT
path: "/users/self/password"
tags: ["Users"]
---

# Changes the user's password

`PUT /users/self/password`

Changes the user's password in Cognito

## Request body

- object
  - `type` 'NewPasswordRequired' | 'ForgottenPassword', required
  - `email` string, required
  - `password` string, required
  - `session` string — Required if type is NewPasswordRequired
  - `verification_token` string — Required if type is ForgottenPassword

## Response `202`

Password changed

- PasswordResetExpirationTime
  - `expirationTime` string — Expiration Time, UTC ISO 8601
  - `refreshTokenExpirationTime` string — Refresh Token Expiration Time, UTC ISO 8601

## Other responses

- `400` — Request rejected due to invalid parameters supplied
- `500` — Failed to process the request due to an internal error
- `501` — Requested unimplemented password change type

---

[API](https://skmtc.net/office-of-national-statistics/apis/identity-api.md) · [All operations](https://skmtc.net/office-of-national-statistics/apis/identity-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/office-of-national-statistics/identity-api/revisions/6472459b6b03/schema)