Change password for specific user account

POST

/v1/users/:userId/change-password

Change password for specific user account

Allows changing the password for a specific user account identified by user ID, requiring the current password for verification to ensure authorized password changes and maintain account security.

Request

Add parameter in header authorization

Example: Authorization: Bearer <token>

userId string

required

Unique identifier of the user account to retrieve, used to fetch complete profile information including personal details, organization memberships, roles, and activity tracking data.

Match pattern: ^[a-fA-F0-9]{24}$

Body Params application/json

oldPassword string required

Current password that the user is actively using for authentication, required for verification to ensure the password change request is authorized by the legitimate account owner.

≤ 128 characters · ≥ 8 characters

newPassword string required

New password that will replace the current password for future authentication, must meet platform security requirements including minimum length, complexity, and character diversity to ensure account protection.

≤ 128 characters · ≥ 8 characters

{
    "oldPassword": "CurrentSecureP@ss123",
    "newPassword": "NewSecureP@ssw0rd!"
}

Responses

200 Response application/json

status boolean optional

data object optional

passwordChanged string optional

Confirmation status indicating that the user password change operation completed successfully, returning OK value to confirm the new password has been securely stored and is now active.

OK

{
    "status": true,
    "data": {
        "passwordChanged": "OK"
    }
}

400 Response application/json

status boolean optional

false

error object optional

code number optional

5023

message string optional

Incorrect old password

{
    "status": false,
    "error": {
        "code": 5023,
        "message": "Incorrect old password"
    }
}

401 Response application/json

status boolean optional

false

error object optional

code number optional

4001

message string optional

Unauthorized

{
    "status": false,
    "error": {
        "code": 4002,
        "message": "No auth token"
    }
}

404 Response application/json

status boolean optional

false

error object optional

code number optional

3001

message string optional

Entity not found

{
    "status": false,
    "error": {
        "code": 3001,
        "message": "Entity not found"
    }
}