---
title: "Reset forgotten password"
type: reference
method: POST
path: /rest-api/auth/forgot.do
tag: "Authentication"
---

# Reset forgotten password

`POST https://YOUR-NETWORK-DOMAIN/rest-api/auth/forgot.do`

Initiates a password reset flow by sending a reset email to the specified address. If the email matches an existing active user, a password reset link is dispatched. If no user is found with the given email, the operation completes silently without error to prevent email enumeration attacks. Validation errors on the email field are returned in the response.

## Form params

| Name | Type | Required | Example | Description |
|---|---|---|---|---|
| `email` | string | no | `user@example.com` | Email address associated with the account |

## Responses

- `200` — Password reset email sent (or no-op if email not found)
- `400` — Bad request — invalid or missing parameters

## Example request

```bash
curl --request POST \
  --url 'https://YOUR-NETWORK-DOMAIN/rest-api/auth/forgot.do' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'email=user@example.com'
```

Source: https://epom.com/ad-server/docs/api/authentication/post-auth-forgot