# password_reused

The new password is the same as the one the account must replace (400).

## Meaning

The account was flagged to change its password (by an administrator, through
`POST /v1/admin/orgs/{slug}/users/{id}/password-change`), and the password chosen
from a reset or invitation link is the current one.

## Impact

The password was not changed. The user chose the old password again; it is expected
and they only need to choose another.

## Diagnosis

Look the request id up on the Troubleshooting page; the attempt is recorded on the
link's completion action with reason `invalid_request`.

## Mitigation

- As a user: choose a password you have not used for this account.

## Escalation

Escalate when a password that differs from the current one is refused. Open an issue
with the request id and the server version. Never attach either password.

---

[Problem code runbooks](https://www.nauthera.io/docs/v1/runbooks/problems) · Generated from [`internal/runbook/problems.yaml`](https://github.com/nauthera/nauthera-server/blob/main/internal/runbook/problems.yaml) in nauthera-server.