> ## Documentation Index
> Fetch the complete documentation index at: https://docs.member.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Reset Password

> Set a new password with the token from a password reset email.

`token` is the value after `#` in the emailed link; `password` must be at
least 8 characters. On success returns 204 and signs the account out of
every existing session: refresh tokens issued before the reset stop
working immediately, and access tokens expire on their normal short
schedule. Log in again with the new password to get a new token pair.

A token works once and expires one hour after it was requested. An
expired, already used or unknown token returns 410 with code
`password_reset_expired`; request a new email via `POST /api/auth/forgot`.



## OpenAPI

````yaml /openapi/mio-openapi.json post /api/v1/auth/reset
openapi: 3.1.0
info:
  description: >-
    Production API reference for Membership.io. Use the authored guides for
    workflows and the generated endpoint pages for exact parameters and schemas.
  title: Membership.io API
  version: 0.1.0
servers:
  - description: Production
    url: https://api.member.dev
security:
  - bearerAuth: []
paths:
  /api/v1/auth/reset:
    post:
      tags:
        - auth
      summary: Reset Password
      description: >-
        Set a new password with the token from a password reset email.


        `token` is the value after `#` in the emailed link; `password` must be
        at

        least 8 characters. On success returns 204 and signs the account out of

        every existing session: refresh tokens issued before the reset stop

        working immediately, and access tokens expire on their normal short

        schedule. Log in again with the new password to get a new token pair.


        A token works once and expires one hour after it was requested. An

        expired, already used or unknown token returns 410 with code

        `password_reset_expired`; request a new email via `POST
        /api/auth/forgot`.
      operationId: auth.post_auth_post_auth_reset
      parameters:
        - in: header
          name: User-Agent
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: User-Agent
      requestBody:
        content:
          application/vnd.api+json:
            schema:
              $ref: '#/components/schemas/ResetPasswordRequest'
        required: true
      responses:
        '204':
          description: Successful Response
        '410':
          content:
            application/vnd.api+json:
              schema:
                $ref: '#/components/schemas/JsonApiErrorResponse'
          description: Reset link expired, already used or unknown
        '422':
          content:
            application/vnd.api+json:
              schema:
                $ref: '#/components/schemas/JsonApiErrorResponse'
          description: Password too short, missing token, or unknown body field
        '429':
          content:
            application/vnd.api+json:
              schema:
                $ref: '#/components/schemas/JsonApiErrorResponse'
          description: Rate limited
components:
  schemas:
    ResetPasswordRequest:
      additionalProperties: false
      properties:
        password:
          maxLength: 4096
          minLength: 8
          title: Password
          type: string
        token:
          maxLength: 512
          minLength: 1
          title: Token
          type: string
      required:
        - token
        - password
      title: ResetPasswordRequest
      type: object
    JsonApiErrorResponse:
      description: Error JSON:API response.
      properties:
        errors:
          items:
            $ref: '#/components/schemas/JsonApiError'
          title: Errors
          type: array
        meta:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          title: Meta
      required:
        - errors
      title: JsonApiErrorResponse
      type: object
    JsonApiError:
      properties:
        code:
          anyOf:
            - type: string
            - type: 'null'
          title: Code
        detail:
          anyOf:
            - type: string
            - type: 'null'
          title: Detail
        id:
          anyOf:
            - type: string
            - type: 'null'
          title: Id
        meta:
          anyOf:
            - additionalProperties: true
              type: object
            - type: 'null'
          title: Meta
        source:
          anyOf:
            - additionalProperties:
                type: string
              type: object
            - type: 'null'
          title: Source
        status:
          title: Status
          type: string
        title:
          title: Title
          type: string
      required:
        - status
        - title
      title: JsonApiError
      type: object
  securitySchemes:
    bearerAuth:
      bearerFormat: JWT or mio_sk API key
      description: >-
        Send platform JWTs, contact JWTs, or team API keys as `Authorization:
        Bearer <token>`.
      scheme: bearer
      type: http

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.