---
title: "Request a password reset email."
method: POST
path: "/auth/password-forgot"
tags: ["Auth"]
---

# Request a password reset email.

`POST /auth/password-forgot`

Generates a password reset token and sends an email to the agent with a reset link.
The link expires in 1 hour.

Always returns HTTP 200 regardless of whether the username exists, to prevent
username enumeration attacks.

This endpoint is unauthenticated. Use `POST /auth/password-reset` with the token
from the email to complete the reset.

## Request body

- RequestBodyAuthPasswordForgotPOST — Request body for POST /auth/password-forgot (initiate password reset).
  - `username` string, email, required — The agent's username (email address). A reset link will be sent to this address if an account exists.

## Response `200`

Request accepted. A reset email will be sent if the username exists.
Always returns 200 to prevent username enumeration.

- object

## Other responses

- `400` — Bad request. Possible causes: - `username` is missing. - Request body is malformed JSON.

---

[API](https://skmtc.net/voipbin/apis/voipbin-api.md) · [All operations](https://skmtc.net/voipbin/apis/voipbin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voipbin/voipbin-api/versions/79e779080bcc/schema)