> ## Documentation Index
> Fetch the complete documentation index at: https://lightship.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# POST /me/password

> Change the authenticated user's password. Clears must_change_password and revokes the caller's other browser sessions across all replicas.

`POST /me/password` lets the authenticated user rotate their own password. It is available even while `must_change_password` is true, so a newly created user can complete first-login by changing the generated password.

## Endpoint

```text theme={null}
POST http://localhost:8080/me/password
```

Authentication: session cookie or `Authorization: Bearer lsk_...`.

## Request body

<ParamField body="current_password" type="string" required>
  The caller's current password.
</ParamField>

<ParamField body="new_password" type="string" required>
  The new password. Must contain at least 12 characters.
</ParamField>

## Example

```bash theme={null}
curl -X POST http://localhost:8080/me/password \
  -H "Authorization: Bearer lsk_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"current_password": "old-password", "new_password": "new-password-2026"}'
```

<Info>
  A successful change clears `must_change_password` and revokes every other session belonging to the caller.
</Info>