---
search:
  tags:
    - Auth
    - POST
seo:
  description: >-
    Any signed in user. Replaces the caller's password after verifying the…
    Reference for the POST /api/v1/auth/change-password endpoint in the
    PharmaFlow API.
sidebar:
  label: Change the caller's password
  badge: POST
title: Change the caller's password
type: openapi-operation
---
Any signed in user. Replaces the caller's password after verifying the current one. A new password under eight characters is refused, and every other session keeps the token it already holds.

`POST /api/v1/auth/change-password`

**Request body** (`application/json`, required)

- `current_password` (string, required)
- `new_password` (string, required)

Request body example:

```json
{
  "current_password": "string",
  "new_password": "stringst"
}
```

**Responses**

- `200` — Password changed
- `400` — Current password is incorrect, or the current or new password is missing or too short
- `401` — Not authenticated

Response example, 200:

```json
{
  "ok": true
}
```