Prerequisites
- Valid recovery code obtained from the wallet recovery endpoint
- Wallet username in the format
<walletUsername>@<appId> - New password meeting security requirements
Request
Request Body
| Field | Type | Required | Description |
|---|---|---|---|
username | string | Yes | Username in format <walletUsername>@<appId> |
recoveryCode | string | Yes | Recovery code received via email |
newPassword | string | Yes | New password (minimum 8 characters) |
Response
Response Fields
| Field | Type | Description |
|---|---|---|
message | string | Confirmation message about the password reset |
timestamp | string | ISO 8601 timestamp of the response |
Error Responses
| Status Code | Description |
|---|---|
| 400 | Invalid request format, expired recovery code, or weak password |
| 404 | Wallet not found with the provided username |
| 500 | Internal server error |
Password Requirements
- Minimum 8 characters
- At least one uppercase letter
- At least one lowercase letter
- At least one number
- At least one special character
Usage Notes
- Recovery codes are single-use and expire after successful password reset
- The wallet becomes immediately active after successful password reset
- You can log in with the new password right after reset
- Recovery codes typically expire within 24 hours if not used
- After successful reset, all existing JWT tokens for the wallet are invalidated