Manage customer passwords: forgot, reset, and update.
Manage customer passwords. These endpoints handle the full password lifecycle: requesting a reset link, resetting with a token, and updating while authenticated.
Webhook events
Password actions fire the following webhook events:
customer.password.reset— when a password reset is requestedcustomer.password_update.succeeded— when a password is changed (via reset or update)
Available endpoints
| Method | Endpoint | Auth | Description |
|---|---|---|---|
| POST | /password/forgot | Public | Request a password reset email |
| POST | /password/reset | Public | Reset password with token |
| POST | /password/update | Authenticated | Update password on-session |