Change a customers password

The hash (OTP) must be valid and is typically provided by a call to password-change-init which will SMS the OTP to the customer. Identity is the customers username. Password is the new password to set. If the customer has security questions then the answers to these must be provided. The questions can be obtained by calling the GET verifications/{identifier}?code={code} endpoint with the OTP provided by the customer. If the tenant has enabled comparison documents for password reset then comparison document must be provided. This API does not need a JWT to be used.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required
Body Params
string
string
enum
Allowed:
string

Required is hash(OTP) is not passed. This is the current password

string
string

Required if currentPassword is not passed. OTP required to prove the user is present and has identified themselves - e.g. by SMS OTP. Typically available via a call to initiate users password change

string

New password. Can be pre-hashed with BCRYPT

securityQuestionAnswers
array of objects

Optional: Needed if the customer has security questions

securityQuestionAnswers
Responses
200

OK

400

Bad Request

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here!