> ## Documentation Index
> Fetch the complete documentation index at: https://orchestrator-docs.hexoforge.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Reset password

> Set a new password using the email OTP.

Completes password reset using the OTP from email. Requires `X-API-Key`. On success, **all refresh tokens are revoked**.

## Request body

<ParamField body="email" type="string" required>
  Valid email.
</ParamField>

<ParamField body="otp" type="string" required>
  Six-digit OTP from email.
</ParamField>

<ParamField body="new_password" type="string" required>
  8–128 characters; subject to password policy.
</ParamField>

## Response

**204 No Content** — empty body.

## Status codes

| Code | Meaning                                               |
| ---- | ----------------------------------------------------- |
| 204  | Password updated                                      |
| 400  | Invalid or expired OTP, or password validation failed |
| 429  | Rate limited                                          |