Skip to main content
POST
Complete the password recovery process by setting a new password.

Request Body

string
required
Reset token from recovery verify step
string
required
New password (min 12 characters, must include uppercase, lowercase, number, and special character)

Response

string
Success message
string
New access token (user is automatically logged in)
string
New refresh token

Errors

object
Invalid token or weak password
object
Token not found

Notes

  • User is automatically logged in after password reset
  • All existing sessions are invalidated
  • MFA must be re-verified if enabled