Skip to main content
POST
Verify the current admin password
Verifies the current built-in admin password matches a value the caller provides. The canonical “pre-flight check” for an automated rotation workflow — call this before Change admin password to confirm the value in your secrets vault is still the current one. Catches desync between vault and Syteca before you replace a value that’s already been changed elsewhere.
For ACB deployments updated from a version prior to 1.2, switch to the https://{hostname}/EkranACB server in the Playground.

Permissions required

What the response means

The response has a single boolean verified field:
A false response is an alert condition. Either your vault is out of sync, or the admin password was rotated by someone else. Investigate before calling Change admin password — overwriting an unknown-current value can lock administrative access if your rotation fails partway through.

Rate limit

5 requests per minute per Access Token. Intentionally bandwidth-limited to make brute-force attacks impractical.

Errors

See Status codes. Common errors:
  • 401 Unauthorized — invalid or expired Access Token.
  • 403 Forbidden — user lacks administrative User Management permission.
  • 429 Too Many Requests — rate limit exceeded.

Admin password rotation

Concept page — how verify + change work together.

Change admin password

Step 2 — actually rotate.

API reference

Authentication, status codes.

Administrative permissions

User Management permission details.

Authorizations

Authorization
string
header
required

Access token for authentication

Body

application/json
password
string<password>
required

The current admin password to verify.

Response

Verification completed

verified
boolean

Whether the provided password matches the current admin password.