POST /_security/user/_password

POST /_security/user/<username>/_password

You can use the create user API to update everything but a user’s username and password. This API changes a user’s password.

For more information about the native realm, see Realms and Configuring a native realm.

Every user can change their own password. Users with the manage_security privilege can change passwords of other users.

The following example updates the password for the jacknich user:

POST /_security/user/jacknich/_password
{
  "password" : "s3cr3t"
}

A successful call returns an empty JSON structure.

{}