yc954 (yc954) asked a question.
Failed to change an existing user password using v1/user API. In the error it is showing "Api validation failed: password".
I tried to change an existing user password using /api/v1/users/ end point and got the following error. What is the actual cause of the error ?
{
"errorCode": "E0000001",
"errorSummary": "Api validation failed: password",
"errorLink": "E0000001",
"errorId": "oae5RivB-NyRO2JD_aCEim6ug",
"errorCauses": [
{
"errorSummary": "password: Password"
}
]
}
Hello @yc954 (yc954) , thank you for contacting Okta Community!
I've reviewed our documentation for something relevant. It looks like your question is more appropriate for our dedicated Okta Developer Forum. I advise reaching out via devforum.okta.com as they will have more insight into this topic.
In the meantime, you can reference this article from Okta Developer:
Okta error codes and descriptions: E0000001
While we'll do our best to answer your questions here, this medium is more inclined towards Okta's core products and features (non-developer work).
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Join the discussion for our Ask Me Anything on September 29, 2025: Device Assurance. Ask our expert questions.
@yc954 (yc954) - API validation failed typically indicates a problem with the payload. For example if you have a missing attribute when an attribute is expected.
So for example from the API documentation for change_password you can see it requires 3 key:value pairs at the top level and old/new password objects need a key:value pair of value:xxxx
curl -i -X POST \
'https://subdomain.okta.com/api/v1/users/{userId}/credentials/change_password' \
-H 'Authorization: YOUR_AUTH_INFO_HERE' \
-H 'Content-Type: application/json' \
-d '{
"oldPassword": {
"value": "tlpWENT2m"
},
"newPassword": {
"value": "uTVM,TPw55"
},
"revokeSessions": true
}'
Here's a screenshot leveraging Okta Workflows using "Expire with temp pass" + Update Password which allows you as an admin to set any password you want. The final object Construct is the body used to update the password
@yc954 (yc954) may be would you be able to share the body of the request (redacting pii and password info)?
May be the request body was not well formed.
My guess is the password you provided as the current password was incorrect