Set a new password for the user the token belongs to. This is the last step of both the forgotten-password and change-password flows. Setting the password revokes the user's access and refresh tokens, except the API key created on the dashboard's API Keys page, and the response carries a new bearer token.

Prerequisites — a bearer token for the user: the token from Verify email OTP with type: forgot_password, or the user's own token after Change password and Verify email OTP with type: change_password.

Authentication — Partner or Account token. Acts on the user the token belongs to. The token you call with is revoked (unless it's your API key); use the returned token.

Rate limit — none. Responses do not include X-RateLimit-* headers.