---
schema_version: "1"
id: e729fb010984a2e325214f43f588ea4706d993b3de37370c444a91a6387dddb8
title: "Headless Forgot Password Flow: Change the User’s Password"
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/security/headless-identity-impl-guide/guides/headless-identity/headless-identity-postman-changepassword.md
canonical_url: https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-postman-changepassword.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 92f89c6a091d963aebac017f4ba3f5f24eb6ddd61a6df2f98c8ca11f70e6decb
products:
  - Headless Identity Implementation Guide
  - Security
---

# Headless Forgot Password Flow: Change the User’s Password

After you receive a one-time password (OTP) from Salesforce, you can change your password with a new request to the forgot password endpoint. This example walks you through changing the password in Postman.

|Required Editions|
|-----------------|
|Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience|
|Available in: **Enterprise**, **Unlimited**, and **Developer** Editions|

1.  From the Headless Identity API Demo folder in Postman, select **Forgot Password - Change Password**.

    Note the location of the POST request. It’s the `/services/auth/headless/forgot_password` endpoint on your Experience Cloud site, which is the same endpoint you used for the initial reset request.

2.  To see the request body, click **Body**. The password reset request includes these parameters.


    -   `username`—The user’s registered username
    -   `newpassword`—The user’s new password.
    -   `otp`—The one-time password (OTP) sent to the user’s email
3.  Replace the body parameter values with your own information.


    1.  For `username`, enter the username that you registered and logged in with.

    2.  For `newpassword`, enter a new password that includes uppercase and lowercase characters, a number, and a special character.

    3.  For `otp`, enter the OTP that you received from your initial request to the forgot password endpoint.

4.  To send the request to Headless Forgot Password API, click **Send**.

    Salesforce validates the OTP and finishes resetting the password. If the request is successful, Salesforce sends a success response. Here’s an example response in Postman.

    ```nolang
    {
        "status_code": "success"
    }
    ```