Change the password and revoke every session
Revokes every refresh token of the account, the caller's included: each session, this one too, ends when its access token expires.
Authorization
bearerAuth AuthorizationBearer <token>
Session token issued by the accounts service (or the legacy /v1/auth routes).
In: header
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
curl -X PATCH "https://example.com/v1/auth/me/password" \ -H "Content-Type: application/json" \ -d '{ "new_password": "a longer passphrase 2026", "old_password": "correct horse battery staple" }'{ "message": "password updated successfully"}