---
title: "Reset agent password using a reset token."
method: POST
path: "/auth/password-reset"
tags: ["Auth"]
---

# Reset agent password using a reset token.

`POST /auth/password-reset`

Validates the password reset token (received via email from `POST /auth/password-forgot`)
and updates the agent's password.

The token is single-use and expires in 1 hour. Guest agents cannot reset their password.

This endpoint is unauthenticated. The reset token acts as proof of identity.

## Request body

- RequestBodyAuthPasswordResetPOST — Request body for POST /auth/password-reset (complete password reset).
  - `token` string, required — 64-character lowercase hexadecimal password reset token. Received via the link in the reset email sent by `POST /auth/password-forgot`.
  - `password` string, required — The new password to set for the account. Must be at least 8 characters.

## Response `200`

Password updated successfully.

- object

## Other responses

- `400` — Bad request. Possible causes: - `token` is missing, invalid, or expired (tokens expire after 1 hour). - `password` is missing or fewer than 8 characters. - Request body is malformed JSON.

---

[API](https://skmtc.net/voipbin/apis/voipbin-api.md) · [All operations](https://skmtc.net/voipbin/apis/voipbin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voipbin/voipbin-api/versions/79e779080bcc/schema)