Request a password reset email
If the supplied email belongs to a registered account, sends a password-reset email containing a single-use token. To prevent account enumeration this endpoint always returns 200 with the same body, whether or not the email exists.
Rate-limited to 5 requests per minute per source IP.
Request
This endpoint expects an object.
email
Email address of the account to reset. Always returns 200 regardless of validity.
Response
Reset email dispatched (always returned, regardless of email validity)
message
Human-readable confirmation message
Errors
429
Forgot Password Request Too Many Requests Error