---
title: "Flag the current password as weak"
method: POST
path: "/v1/auth/password-weak/flag"
tags: ["Password Weak"]
---

# Flag the current password as weak

`POST /v1/auth/password-weak/flag`

Sets passwordWeakSince to the current time if not already set. Called by clients after a HIBP check on login finds the user's password in the breach corpus.

## Response `200`

Flagged

## Other responses

- `401` — Unauthenticated
- `500` — Internal server error

---

[API](https://skmtc.net/timesheet/apis/timesheet-api.md) · [All operations](https://skmtc.net/timesheet/apis/timesheet-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/timesheet/timesheet-api/versions/fbe59bacb638/schema)