Password reset

Reset your password if you have forgotten it or if your account was compromised.

Request a reset link

curl -X POST https://api.fold.run/password-reset/request \
  -H "Content-Type: application/json" \
  -d '{ "email": "you@example.com" }'

An email with a reset link is sent to the address on file. The link expires after 1 hour.

For security, this endpoint always returns a success response regardless of whether the email exists.

Reset your password

Click the link in the email, or submit the token directly:

curl -X POST https://api.fold.run/password-reset/verify \
  -H "Content-Type: application/json" \
  -d '{
    "token": "reset_token_from_email",
    "new_password": "new-secure-password-123"
  }'

Password requirements:

• At least 12 characters
• At least one uppercase letter
• At least one lowercase letter
• At least one number

On success, your password is updated and all existing sessions are invalidated. You will need to log in again on all devices.

A security alert email is sent to confirm the password was changed.

From the dashboard

Click "Forgot password?" on the login page at app.fold.run/console/login to start the reset flow.

Security notes

• Reset tokens can only be used once.
• Requesting a new token invalidates any previous unused token.
• All sessions are invalidated when the password is changed.
• Rate limits apply to prevent abuse.
• If you have two-factor authentication enabled, MFA remains active after a password reset.