{"templateId":"markdown","sharedDataIds":{},"props":{"metadata":{"markdoc":{"tagList":["tabs","tab"]},"type":"markdown"},"seo":{"title":"Reefpay Docs","description":"Reefpay is the groundbreaking payment gateway that lets you integrate with the future of payments.","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"reset-a-user-password","__idx":0},"children":["Reset a user password"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":1},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user's login email (username)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Either the current password or a one-time password (OTP) obtained through the forgot-password flow"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"password-requirements","__idx":2},"children":["Password requirements"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"align":"left","data-label":"Rule"},"children":["Rule"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"left","data-label":"Constraint"},"children":["Constraint"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["Minimum length"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["12 characters"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["Maximum length"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["128 characters"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["Format"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["Use a strong passphrase or complex password"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"option-a-change-password-known-current-password","__idx":3},"children":["Option A: Change password (known current password)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use this when the user knows their current password and wants to set a new one."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-1-send-the-password-update","__idx":4},"children":["Step 1: Send the password update"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Send ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["PATCH /v1/users/me/passwords"]}," with Basic Auth (username + current password)."]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"curl","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"shell","header":{"controls":{"copy":{}}},"source":"curl -X PATCH \\\n https://api.dev.paradisegateway.net/v1/users/me/passwords \\\n -u \"john.doe@example.com:current-password-here\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"user_name\": \"john.doe@example.com\",\n \"current_password\": \"Meat-Said-Whispered-Plant6-One\",\n \"new_password\": \"Rocky-Change-Thread-Tank1-Slowly\"\n }'\n","lang":"shell"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Python","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"python","header":{"controls":{"copy":{}}},"source":"import requests\n\nresp = requests.patch(\n \"https://api.dev.paradisegateway.net/v1/users/me/passwords\",\n auth=(\"john.doe@example.com\", \"Meat-Said-Whispered-Plant6-One\"),\n headers={\"Content-Type\": \"application/json\"},\n json={\n \"user_name\": \"john.doe@example.com\",\n \"current_password\": \"Meat-Said-Whispered-Plant6-One\",\n \"new_password\": \"Rocky-Change-Thread-Tank1-Slowly\",\n },\n)\nprint(resp.json())\n","lang":"python"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"JavaScript","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"javascript","header":{"controls":{"copy":{}}},"source":"const credentials = btoa(\"john.doe@example.com:Meat-Said-Whispered-Plant6-One\");\nconst resp = await fetch(\n \"https://api.dev.paradisegateway.net/v1/users/me/passwords\",\n {\n method: \"PATCH\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Basic ${credentials}`,\n },\n body: JSON.stringify({\n user_name: \"john.doe@example.com\",\n current_password: \"Meat-Said-Whispered-Plant6-One\",\n new_password: \"Rocky-Change-Thread-Tank1-Slowly\",\n }),\n }\n);\nconsole.log(await resp.json());\n","lang":"javascript"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"C#","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"csharp","header":{"controls":{"copy":{}}},"source":"using var client = new HttpClient();\nvar authBytes = System.Text.Encoding.UTF8.GetBytes(\n \"john.doe@example.com:Meat-Said-Whispered-Plant6-One\");\nclient.DefaultRequestHeaders.Authorization =\n new System.Net.Http.Headers.AuthenticationHeaderValue(\n \"Basic\", Convert.ToBase64String(authBytes));\n\nvar payload = new\n{\n user_name = \"john.doe@example.com\",\n current_password = \"Meat-Said-Whispered-Plant6-One\",\n new_password = \"Rocky-Change-Thread-Tank1-Slowly\"\n};\nvar resp = await client.PatchAsJsonAsync(\n \"https://api.dev.paradisegateway.net/v1/users/me/passwords\", payload);\nConsole.WriteLine(await resp.Content.ReadAsStringAsync());\n","lang":"csharp"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Java","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"java","header":{"controls":{"copy":{}}},"source":"HttpClient client = HttpClient.newHttpClient();\nString auth = Base64.getEncoder().encodeToString(\n \"john.doe@example.com:Meat-Said-Whispered-Plant6-One\".getBytes());\nString body = \"\"\"\n {\n \"user_name\": \"john.doe@example.com\",\n \"current_password\": \"Meat-Said-Whispered-Plant6-One\",\n \"new_password\": \"Rocky-Change-Thread-Tank1-Slowly\"\n }\n \"\"\";\nHttpRequest request = HttpRequest.newBuilder()\n .uri(URI.create(\n \"https://api.dev.paradisegateway.net/v1/users/me/passwords\"))\n .header(\"Content-Type\", \"application/json\")\n .header(\"Authorization\", \"Basic \" + auth)\n .method(\"PATCH\", HttpRequest.BodyPublishers.ofString(body)).build();\nHttpResponse resp = client.send(request,\n HttpResponse.BodyHandlers.ofString());\nSystem.out.println(resp.body());\n","lang":"java"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Go","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"go","header":{"controls":{"copy":{}}},"source":"payload := strings.NewReader(`{\n \"user_name\": \"john.doe@example.com\",\n \"current_password\": \"Meat-Said-Whispered-Plant6-One\",\n \"new_password\": \"Rocky-Change-Thread-Tank1-Slowly\"\n}`)\nreq, _ := http.NewRequest(\"PATCH\",\n \"https://api.dev.paradisegateway.net/v1/users/me/passwords\", payload)\nreq.Header.Set(\"Content-Type\", \"application/json\")\nreq.SetBasicAuth(\"john.doe@example.com\", \"Meat-Said-Whispered-Plant6-One\")\nresp, _ := http.DefaultClient.Do(req)\ndefer resp.Body.Close()\nbody, _ := io.ReadAll(resp.Body)\nfmt.Println(string(body))\n","lang":"go"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"PHP","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"php","header":{"controls":{"copy":{}}},"source":"$ch = curl_init(\"https://api.dev.paradisegateway.net/v1/users/me/passwords\");\ncurl_setopt_array($ch, [\n CURLOPT_RETURNTRANSFER => true,\n CURLOPT_CUSTOMREQUEST => \"PATCH\",\n CURLOPT_USERPWD => \"john.doe@example.com:Meat-Said-Whispered-Plant6-One\",\n CURLOPT_HTTPHEADER => [\"Content-Type: application/json\"],\n CURLOPT_POSTFIELDS => json_encode([\n \"user_name\" => \"john.doe@example.com\",\n \"current_password\" => \"Meat-Said-Whispered-Plant6-One\",\n \"new_password\" => \"Rocky-Change-Thread-Tank1-Slowly\",\n ]),\n]);\necho curl_exec($ch); curl_close($ch);\n","lang":"php"},"children":[]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Ruby","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"ruby","header":{"controls":{"copy":{}}},"source":"require \"net/http\"; require \"json\"\nuri = URI(\"https://api.dev.paradisegateway.net/v1/users/me/passwords\")\nreq = Net::HTTP::Patch.new(uri, { \"Content-Type\" => \"application/json\" })\nreq.basic_auth(\"john.doe@example.com\", \"Meat-Said-Whispered-Plant6-One\")\nreq.body = {\n user_name: \"john.doe@example.com\",\n current_password: \"Meat-Said-Whispered-Plant6-One\",\n new_password: \"Rocky-Change-Thread-Tank1-Slowly\",\n}.to_json\nresp = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(req) }\nputs resp.body\n","lang":"ruby"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"response","__idx":5},"children":["Response"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["200"]}," response confirms the password was changed."]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"{\n \"status\": true,\n \"correlation_id\": \"e5f6a7b8-c9d0-1234-ef01-23456789abcd\"\n}\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"option-b-forgot-password-otp-flow","__idx":6},"children":["Option B: Forgot password (OTP flow)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use this when the user has forgotten their password. This is a two-step process."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"---\nconfig:\n theme: 'neutral'\n---\nsequenceDiagram\n participant User\n participant App as Your App\n participant API as ","diagramHtml":"Your AppUserYour AppUser","diagramHtmlDark":"Your AppUserYour AppUser"},"children":["---\nconfig:\n theme: 'neutral'\n---\nsequenceDiagram\n participant User\n participant App as Your App\n participant API as ","Reefpay","\n App->>API: POST /v1/mfa/challenges (type: forgot_password)\n API-->>User: OTP sent via email\n User->>App: Enters OTP\n App->>API: PATCH /v1/users/me/passwords (with OTP)\n API-->>App: 200 OK — password updated\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-1-request-a-one-time-password","__idx":7},"children":["Step 1: Request a one-time password"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Send ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["POST /v1/mfa/challenges"]}," with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["type: forgot_password"]}," and the user's email."]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"shell","header":{"controls":{"copy":{}}},"source":"curl -X POST \\\n https://api.dev.paradisegateway.net/v1/mfa/challenges \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"user_name\": \"john.doe@example.com\",\n \"type\": \"forgot_password\"\n }'\n","lang":"shell"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Response:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"{\n \"status\": true,\n \"correlation_id\": \"f6a7b8c9-d0e1-2345-f012-3456789abcde\"\n}\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The user receives the OTP at their registered email address."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-2-set-new-password-with-otp","__idx":8},"children":["Step 2: Set new password with OTP"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Send ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["PATCH /v1/users/me/passwords"]}," with the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["one_time_password"]}," field instead of ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["current_password"]},"."]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"shell","header":{"controls":{"copy":{}}},"source":"curl -X PATCH \\\n https://api.dev.paradisegateway.net/v1/users/me/passwords \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"user_name\": \"john.doe@example.com\",\n \"one_time_password\": \"123456\",\n \"current_password\": \"placeholder\",\n \"new_password\": \"Hat-Chest-Clock5-Solid-Round\"\n }'\n","lang":"shell"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Response:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"{\n \"status\": true,\n \"correlation_id\": \"a7b8c9d0-e1f2-3456-0123-456789abcdef\"\n}\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"error-responses","__idx":9},"children":["Error responses"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"align":"left","data-label":"Status"},"children":["Status"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"left","data-label":"Meaning"},"children":["Meaning"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["401"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["Current password or OTP is incorrect"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["404"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"left"},"children":["User not found"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"next-steps","__idx":10},"children":["Next steps"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/docs/how-tos/clients-users/enable-mfa"},"children":["Enable multi-factor authentication"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/docs/how-tos/clients-users/update-user"},"children":["Update user profile"]}]}]}]},"headings":[{"value":"Reset a user password","id":"reset-a-user-password","depth":1},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Password requirements","id":"password-requirements","depth":2},{"value":"Option A: Change password (known current password)","id":"option-a-change-password-known-current-password","depth":2},{"value":"Step 1: Send the password update","id":"step-1-send-the-password-update","depth":3},{"value":"Response","id":"response","depth":3},{"value":"Option B: Forgot password (OTP flow)","id":"option-b-forgot-password-otp-flow","depth":2},{"value":"Step 1: Request a one-time password","id":"step-1-request-a-one-time-password","depth":3},{"value":"Step 2: Set new password with OTP","id":"step-2-set-new-password-with-otp","depth":3},{"value":"Error responses","id":"error-responses","depth":2},{"value":"Next steps","id":"next-steps","depth":2}],"frontmatter":{"title":"Reset a user password","shortTitle":"Reset password","intro":"Update a user password using the Passwords API. The flow requires the current password (or a one-time password from the forgot-password flow) plus the new password.","type":"how-to","seo":{"title":""}},"lastModified":"2026-06-05T02:46:44.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/docs/how-tos/clients-users/reset-password","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}