POST /api/my-account/password

Update password for the user. A logto-verification-id header is required when the user has at least one security verification method: password, primary email, or primary phone. The header can be omitted only when the user has none of these methods and is setting the first password.

application/json

Body Required

  • password string Required

    The new password for the user.

    Minimum length is 1.

Responses

  • 204

    The password was updated successfully.

  • 400

    Bad Request

  • 401

    Permission denied, verification is required or the verification record is invalid.

  • 403

    Forbidden

  • 422

    Unprocessable Content

POST /api/my-account/password
curl \
 --request POST 'https://[tenant_id].logto.app/api/my-account/password' \
 --header "Authorization: Bearer $ACCESS_TOKEN" \
 --header "Content-Type: application/json" \
 --data '{"password":"string"}'
Request examples
{
  "password": "string"
}