Forgot Password

{
  "email": "dev@webyes.com"
}

{
  "success": true,
  "message": "If an account exists for this email, a password reset link has been sent."
}

POST

api

auth

forgot-password

{
  "email": "dev@webyes.com"
}

{
  "success": true,
  "message": "If an account exists for this email, a password reset link has been sent."
}

POST

/api/auth/forgot-password

Sends a password-reset email to the provided address if an account exists. The response is identical regardless of whether the email is registered — this prevents email enumeration attacks.

The reset link expires after 24 hours.

Request Body

string

required

The email address associated with the account.

Response

boolean

Always true (even if the email is not registered).

string

Generic confirmation message.

{
  "email": "dev@webyes.com"
}

{
  "success": true,
  "message": "If an account exists for this email, a password reset link has been sent."
}

Body

application/json

string<email>

required

Response

200

Reset email sent if account exists

Overview

Auth

Users

Websites

Scans

Results

Reports

AI Solutions

Billing

Organisations

Monitoring

Request Body

Response

Body

Response

​Request Body

​Response

Body

Response

Request Body

Response