---
title: "Complete a 2FA based password reset"
method: POST
path: "/zephr/users/reset/{state}"
tags: ["Authentication"]
---

# Complete a 2FA based password reset

`POST /zephr/users/reset/{state}`

Completes the password reset.
**IMPORTANT**: To reset a user's password, first send a POST request to trigger an email with a reset token. This token must be included in the state parameter when calling this API. The validator parameter is optional, if omitted, the OTP can be verified first, and the new password can be submitted separately with the correct OTP.

## Path parameters

- `state` string, required

## Request body

- object
  - `identifiers` object, required
    - `email_address` string
  - `validators` object
    - `password` string

## Response `200`

OK

## Other responses

- `400` — Bad Request
- `404` — Token Not Found
- `409` — The state was already used

---

[API](https://skmtc.net/zuora/apis/public-api-reference.md) · [All operations](https://skmtc.net/zuora/apis/public-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/zuora/public-api-reference/versions/0400dd83950b/schema)