Change the password of the signed-in account.

POST 
/v1/auth/password/change

Requires the current password; revokes every other session on the account (the caller keeps theirs). Session credentials only.

Request

Responses

200

Password changed.

400

Request was malformed or failed validation. The error.code field carries the machine-readable reason; common values include invalid_request, invalid_json, invalid_order_id, invalid_instrument_id, invalid_credential_id, invalid_resolution, and operation-specific codes documented per endpoint.

401

Missing or invalid Authorization header.

429

Too many attempts inside the fixed rate-limit window (10 attempts / 5 minutes per key). Retry in a few minutes.

500

Unexpected server error. Includes a correlation_id; report it when filing a bug.