resetPassword

Email/password reset requires a configured sendResetPassword callback to deliver a token-bearing URL. The client first requests the reset link; after the user reaches the reset page, resetPassword receives the new password and token, while token validity is controlled by resetPasswordTokenExpiresIn.

await authClient.resetPassword({ newPassword, token });

The client methods return an object containing data and error, as shown in the documentation examples.

import { betterAuth } from "better-auth";
import { authClient } from "./auth-client";

export const auth = betterAuth({
  emailAndPassword: {
    enabled: true,
    sendResetPassword: async ({ user, url }) => {
      console.log(`Send reset link to ${user.email}: ${url}`);
    },
  },
});

const { data, error } = await authClient.requestPasswordReset({
  email: "user@example.com",
  redirectTo: "https://app.example.com/reset-password",
});

if (error) throw error;

const token = new URL(data?.url ?? "").searchParams.get("token");
if (!token) throw new Error("Missing reset token");

const result = await authClient.resetPassword({
  newPassword: "new-secure-password",
  token,
});
if (result.error) throw result.error;

Configure the reset-email callback, request a reset link, then pass the link token and new password to the reset method.