> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dotlookup.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Forgot Password

> Request a password-reset link by email

Triggers a password-reset email if an account exists at the supplied address. The response is **always 200** — DotLookup intentionally doesn't disclose whether an email is registered, to prevent account enumeration.

<ParamField body="email" type="string" required>
  Email of the account to reset
</ParamField>

<RequestExample>
  ```bash cURL theme={null}
  curl -X POST https://api.dotlookup.dev/v1/auth/forgot-password \
    -H "Content-Type: application/json" \
    -d '{"email": "you@example.com"}'
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={null}
  {
    "message": "if an account with that email exists, a reset link has been sent"
  }
  ```
</ResponseExample>

The email contains a link in the form `https://dotlookup.dev/reset-password?token=<token>`. The token is single-use, expires after **1 hour**, and is stored hashed server-side — the raw value only exists in the email.

Pair this endpoint with [`POST /v1/auth/reset-password`](/endpoints/reset-password) to complete the flow.