POST /api/auth/forgot-password

Send an OTP to initiate the password reset process.

This endpoint sends a one-time password (OTP) to the user’s email address to begin the password reset process.

The OTP must be verified using the reset password endpoint to complete the password change.

When to use

HTTP

POST /api/auth/forgot-password
Content-Type: application/json

Request Body

{
  "email": "user@example.com"
}

Field	Type	Required	Description
email	string	Yes	Registered user email

Response

{
  "success": true,
  "message": "Password reset OTP sent"
}

The response is intentionally generic to avoid revealing whether the email exists.

Error

{
  "success": false,
  "message": "Email is required"
}

Error

{
  "success": false,
  "message": "Too many requests"
}