Changes a user's password.

POST {{baseUrl}}/account/password

Changes the password for an account on this homeserver.

This API endpoint uses the User-Interactive Authentication API to ensure the user changing the password is actually the owner of the account.

An access token should be submitted to this endpoint if the client has an active session.

The homeserver may change the flows available depending on whether a valid access token is provided. The homeserver SHOULD NOT revoke the access token provided in the request. Whether other access tokens for the user are revoked depends on the request parameters.

Request Body

{"new_password"=>"ihatebananas", "logout_devices"=>true, "auth"=>{"value"=>"reference definitions/auth_data.yaml not found in the OpenAPI spec"}}

HEADERS

KeyDatatypeRequiredDescription
Content-Typestring

RESPONSES

status: OK

{}