> ## Documentation Index
> Fetch the complete documentation index at: https://docs.member.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Change Password

> Change the contact's password, verifying the current one first.

Returns HTTP 422 if current_password is incorrect.
Returns HTTP 400 if the contact has no password set yet.
On success: bumps token_version (invalidates all outstanding refresh
tokens — same semantics as logout_everywhere).
Returns the updated /me shape (including has_password: true) on success.



## OpenAPI

````yaml /openapi/mio-openapi.json post /api/v1/contact-auth/me/password/change
openapi: 3.1.0
info:
  description: >-
    Production API reference for Membership.io. Use the authored guides for
    workflows and the generated endpoint pages for exact parameters and schemas.
  title: Membership.io API
  version: 0.1.0
servers:
  - description: Production
    url: https://api.member.dev
security:
  - bearerAuth: []
paths:
  /api/v1/contact-auth/me/password/change:
    post:
      tags:
        - contact-auth
      summary: Change Password
      description: |-
        Change the contact's password, verifying the current one first.

        Returns HTTP 422 if current_password is incorrect.
        Returns HTTP 400 if the contact has no password set yet.
        On success: bumps token_version (invalidates all outstanding refresh
        tokens — same semantics as logout_everywhere).
        Returns the updated /me shape (including has_password: true) on success.
      operationId: contact_auth.post_contact_auth_post_contact_auth_me_password_change
      requestBody:
        content:
          application/vnd.api+json:
            schema:
              $ref: '#/components/schemas/ChangePasswordEnvelope'
        required: true
      responses:
        '200':
          content:
            application/vnd.api+json:
              schema:
                $ref: '#/components/schemas/ContactMeResponse'
          description: Successful Response
        '422':
          content:
            application/vnd.api+json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Validation Error
      security:
        - HTTPBearer: []
components:
  schemas:
    ChangePasswordEnvelope:
      additionalProperties: false
      properties:
        data:
          $ref: '#/components/schemas/ChangePasswordResource'
      required:
        - data
      title: ChangePasswordEnvelope
      type: object
    ContactMeResponse:
      additionalProperties: false
      description: JSON:API single-resource envelope for /me routes.
      properties:
        data:
          $ref: '#/components/schemas/ContactMeResource'
      required:
        - data
      title: ContactMeResponse
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    ChangePasswordResource:
      additionalProperties: false
      properties:
        attributes:
          $ref: '#/components/schemas/ChangePasswordAttributes'
        type:
          const: password_changes
          title: Type
          type: string
      required:
        - type
        - attributes
      title: ChangePasswordResource
      type: object
    ContactMeResource:
      additionalProperties: false
      description: JSON:API resource object for the current contact (GET /me family).
      properties:
        attributes:
          $ref: '#/components/schemas/ContactMeAttributes'
        id:
          title: Id
          type: string
        type:
          const: contacts
          default: contacts
          title: Type
          type: string
      required:
        - id
        - attributes
      title: ContactMeResource
      type: object
    ValidationError:
      properties:
        ctx:
          title: Context
          type: object
        input:
          title: Input
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
    ChangePasswordAttributes:
      additionalProperties: false
      description: |-
        Attributes for POST /api/contact-auth/me/password/change.

        Verifies current_password then replaces it with new_password.
        422 if current_password is wrong, 400 if no password is set.
      properties:
        current_password:
          maxLength: 4096
          minLength: 1
          title: Current Password
          type: string
        new_password:
          maxLength: 4096
          minLength: 8
          title: New Password
          type: string
      required:
        - current_password
        - new_password
      title: ChangePasswordAttributes
      type: object
    ContactMeAttributes:
      additionalProperties: false
      description: |-
        Attributes block for the `contacts` resource returned by GET/PATCH /me
        and POST /me/password and POST /me/password/change.
      properties:
        created_at:
          format: date-time
          title: Created At
          type: string
        email:
          title: Email
          type: string
        email_verified_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Email Verified At
        has_password:
          title: Has Password
          type: boolean
        team_memberships:
          items:
            $ref: '#/components/schemas/ContactMeMembership'
          title: Team Memberships
          type: array
        tos_accepted_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
          title: Tos Accepted At
        tos_version:
          anyOf:
            - type: string
            - type: 'null'
          title: Tos Version
      required:
        - email
        - email_verified_at
        - tos_accepted_at
        - tos_version
        - created_at
        - has_password
        - team_memberships
      title: ContactMeAttributes
      type: object
    ContactMeMembership:
      additionalProperties: false
      description: A single team membership entry nested inside the /me attributes.
      properties:
        joined_at:
          format: date-time
          title: Joined At
          type: string
        team_id:
          title: Team Id
          type: string
      required:
        - team_id
        - joined_at
      title: ContactMeMembership
      type: object
  securitySchemes:
    bearerAuth:
      bearerFormat: JWT or mio_sk API key
      description: >-
        Send platform JWTs, contact JWTs, or team API keys as `Authorization:
        Bearer <token>`.
      scheme: bearer
      type: http
    HTTPBearer:
      scheme: bearer
      type: http

````