Skip to main content

setInitialPassword

Adds a password to the signed-in account when it does not have one yet — for an account created by magic link or a social provider, which previously had no in-product way to add password sign-in. Requires a valid session token; the session is the proof of account control, so the password is usable immediately and no email confirmation is needed. Refuses with extensions.code PASSWORD_ALREADY_SET (409) when a password is already set — use changePassword, which verifies the current one, or the reset flow if it is forgotten. (Before v1.60.0 that refusal reached clients as INTERNAL_SERVER_ERROR while this description said CONFLICT, so a client could only recognise it by the message text.) A security notification is emailed to the account address. Existing sessions are not revoked.

setInitialPassword(
  newPassword: String!
): Boolean!

Arguments​

setInitialPassword.newPassword ● String! non-null scalar​

The password to set (min 8 characters).

Type​

Boolean scalar​

The Boolean scalar type represents true or false.