Start a password change for the signed-in user. The API checks the current password and emails a six-digit one-time password (OTP) to the user's address. This call doesn't change the password; the new password is validated but not saved. To finish, verify the OTP with Verify email OTP (type: change_password), then send the new password to Reset password with the same token.

Prerequisites — the user's bearer token.

Authentication — Partner or Account token. Acts on the user the token belongs to.

Rate limit — none. Responses do not include X-RateLimit-* headers.