Manual
Overview Getting Started Core concepts Quick Start Guide Create an account and sign in Projects Create and manage projects Project settings Languages Workflow and translation lock Translation Keys Key names and groups ICU messages and placeholders Translating The translation editor Keyboard shortcuts Machine translation Review & Reports Review workflow Reports Branches & Merging Branch workflows: create, merge, and delete The Branches page Tags Translation Memory How translation memory works Glossary The glossary Import & Export Import and export files File formats Integrations GitHub GitLab Slack, Mattermost and Microsoft Teams Repository and API keys Tags from Git tags Webhooks Teams & Access Roles and permissions Teams Inviting people Project access Account & Organization Account settings Organization settings Billing & Plans Plans and limits
CLI
Overview Installation Set up a project Configuration File formats Use the CLI in CI Commands ct push ct pull ct status ct translate ct check ct merge ct tag ct init ct snippet
API
Overview Introduction Authentication Languages and time zones Rate limiting Errors Endpoints Authentication routes Account Organisation Teams Projects Project languages Project members and teams Project webhooks Project API keys Branches Tags Keys Translations and review CLI and CI Translation memory Glossary GitHub GitLab Repository link Guides Pull translations for your build MCP server for AI agents
Log in Get started free
Authentication routes

Reset a password

Sets a new password with the token from the reset email. All sessions of the user end.

1 min read ยท Updated October 2026

Sets a new password with the token from the reset email. All sessions of the user end.

HTTP 
POST /auth/reset-password

Access: No token needed.

Request body #

JSON.

FieldTypeRequiredDescription
tokenstringyesThe token from the link in the email.
passwordstringyesThe new password. At least 8 characters.

Response 204 #

The password is changed and every session of the user is ended. There is no body.

Errors #

StatuserrorWhen
410invalid_or_expired_tokenThe token is unknown, already used or older than an hour.
422invalid_requestpassword is too_short (shorter than the minimum of the organisation, at least 8) or too_weak (the organisation requires upper case, lower case and a digit).
429rate_limitedToo many requests, see Rate limiting.

See Errors for the error format.