---
title: "Reset password"
method: POST
path: "/userAccount/password/reset"
tags: ["User Account"]
---

# Reset password

`POST /userAccount/password/reset`

Reset the password for the currently authenticated user.

**Overview:**

Allows a logged-in user to change their password by providing the current password and a new password.

## Request body

- object
  - `currentPassword` string, password, required
  - `newPassword` string, password, required
  - `cf-turnstile-response` string — Cloudflare Turnstile CAPTCHA token (required when Turnstile is configured server-side)

## Response `200`

Password reset successfully - returns new access token

- AuthenticatedPasswordResetResponse — Response after authenticated user changes password (new access token issued)
  - `data` string, required
  - `accessToken` string, required — New JWT access token after password change

## Other responses

- `400` — Bad request. Possible causes: - `currentPassword` or `newPassword` missing from request body - Current and new password are the same (plain-text comparison) - New password does not meet strength requirements (min 8 chars, uppercase, lowercase, number, special character) - Old and new password are the same (hash comparison against stored password) - Account is blocked due to too many incorrect login attempts
- `401` — Unauthorized. Possible causes: - Invalid or expired access token - Current password is incorrect - Invalid CAPTCHA verification (when Turnstile is configured)
- `404` — Not found. Possible causes: - Auth container not found - User credentials not found (no password set for account) - User not found in IAM service - Organization not found
- `500` — Internal server error

---

[API](https://skmtc.net/pipeshub-ai/apis/pipeshub-api.md) · [All operations](https://skmtc.net/pipeshub-ai/apis/pipeshub-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pipeshub-ai/pipeshub-api/versions/abd27cfefc73/schema)