Skip to main content

Creating passwords for Members

A must exist already before you call any of these endpoints. You cannot simultaneously create a Member and a password. Once you’ve created a Member, you can set their password a few ways:

Using email

  1. Call Reset password via email start to send a magic link to create a new password
  2. Call Reset password via email to accept the password and token
A successful password reset by email will revoke all active sessions for the Member.

Using a session

  1. Call Reset password via session using an existing session
The Member must have an active session to use this endpoint.

Using discovery email with Cross-Organization passwords

If you are using Cross-Organization passwords, you can create a password via discovery email
  1. Call Discovery reset password via email start to send a magic link to create a new password
  2. Call Discovery reset password via email to accept the password and token
A successful password reset by email will revoke all active sessions for the Member.

Password reset email behavior

Password reset emails differ slightly depending on whether a password already exists for a Member:
  • If a password does not exist, the “Verify Email” email template will be used by default.
    • For custom email templates, you can specify the custom template to use with verify_email_template_id when calling the Password Reset APIs.
    • If you’re managing custom email templates via the PWA API, use the template type VERIFY_EMAIL_PASSWORD_RESET.
  • If a password does exist, the “Password reset” email template will be used by default.
    • For custom email templates, you can specify the custom template to use with reset_password_template_id when calling the Password Reset APIs.
    • If you’re managing custom email templates via the PWA API, use the template type RESET_PASSWORD.