# Start a password reset

Starts a password reset.
**IMPORTANT**: To reset a user password, first is required to send a POST to request an email to be sent to the user’s email with a link for the user to click on, so as to verify that they requested this password change.

Endpoint: POST /v4/users/reset
Version: 2026-09-18
Security: ZephrHmacHttp

## Security:

  - `ZephrHmacHttp` (unknown)
    http ZEPHR-HMAC-*

## Request fields (application/json):

  - `identifiers` (object, required)

  - `identifiers.email_address` (string)
    Example: joe.blow@company.com

  - `siteSlug` (string, required)
    The slug of the site where the user account is registered.
    Example: my-site

## Response 200:

  - `200` (unknown)
    OK - The password reset flow has been started successfully

## Response 400:

  - `400` (unknown)
    Bad Request - Incorrect payload was submitted

## Response 404:

  - `404` (unknown)
    Not Found - Site not found with the supplied `siteSlug`, or user not found with the supplied email address