---
title: "Service: /members/forceresetpassword [POST]"
source: https://dev.pageseeder.com/api/services/force-reset-password-POST.html
description: "POST service for administrators to reset member passwords via username or email. Sends confirmation email (step 1) or updates password with valid token (step 2). Requires admin permissions."
last_updated: 2026-09-02T11:36:02+10:00
document_type: api_endpoint
operation_id: member-POST
resource_id: member
path_template: /members/forceresetpassword
http_method: POST
api_category: member
implementation_version: 6.2004
api_since: 5.1000
deprecated_since: null
obsolete_since: null
api_support: supported
cache_control: N/A
generated_at: 2026-09-02
tokens: ~637
---

# /members/forceresetpassword \[POST\]

## Description

Reset [password](../../reference/glossary/password.md) as an administrator.

Resets the password for the user if all parameters are correct.

### Workflow

To identify the member, either the member-username or member-email address is required.

The reset password is done in two steps:

1. The system sends an email asking for confirmation of reset password (with a token) to the user.
2. The user then confirms the request by sending the token to the system. If everything matches, a new password is set and a notification email sent to the user to confirm the password update.

This service can be used for both steps.

- If no member-password is specified, this service sends one by email to the member.
- Otherwise, this service attempts to update the password as specified in the member-password parameter.

### Email templates

This service uses the default PageSeeder templates.

To use customized emails, use the `globalTemplate` [global property](../../guide/configuration/properties/global_properties.md) or use the following service instead:  

 [/groups/\{group\}/members/forceresetpassword](force-reset-password-group-POST.md).

## Parameters

| Name | Description | Required | Type | Default value |
| --- | --- | --- | --- | --- |
| email | The member’s email address | yes, if no username | email |  |
| member-password | The member’s new password | no | string |  |
| member-username | The member’s username | yes, if no email | string |  |
| notify-async | Whether emails should be sent asynchronously (for slow email servers) | no | boolean | `false` |

## Permission

This service requires administrator.

## Response

When no  member-password is specified, then an email confirming the reset password request is sent to the member (step 1) and the XML output is:

```xml
<reset-password status="request-successful" />
```

If member-password is specified and the member has the correct confirmation token, then the new password is set, notification is emailed to the member and the XML output is:

```xml
<reset-password status="password-changed" />
```

## Error Handling

| Code | Cause / Description |
| --- | --- |
| 0x1008 | If the email and username are empty (for admins only) |
| 0x1002 | If the email address is invalid |
| 0x100E | If no member was found (for admins only) |
| 0x1018 | If the member is an API account |
| 0x1019 | If the account is locked |
| 0x100F | If the member has no email address |
| 0x102A | If the reset password token is invalid |