---
title: "Request password reset"
type: reference
method: POST
path: /rest-api/forgot.do
tag: "Users"
---

# Request password reset

`POST https://YOUR-NETWORK-DOMAIN/rest-api/forgot.do`

Public endpoint (no authentication required) that initiates a password reset flow. Validates the provided email address and, if it belongs to an existing user, sends a reset email containing a time-limited token link. The response always succeeds to avoid leaking whether an email is registered. This is equivalent to /rest-api/auth/forgot but operates without session-based auth.

## Form params

| Name | Type | Required | Example | Description |
|---|---|---|---|---|
| `email` | string | no | `user@example.com` | Email address associated with the account |

## Responses

- `200` — Successful operation
- `400` — Bad request — invalid or missing parameters

## Example request

```bash
curl --request POST \
  --url 'https://YOUR-NETWORK-DOMAIN/rest-api/forgot.do' \
  --header 'X-Api-Key: YOUR_API_KEY' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'email=user@example.com'
```

Source: https://epom.com/ad-server/docs/api/users/post-forgot