# Reset a password with Fortify and Vue

> Fortify already exposes the forgot-password and reset-password URLs. The Vue form posts those fields and no others.

- URL: https://laravel-vuejs.space/fortify-password-reset-vue
- Author: Anass Ez-zouaine (https://laravel-vuejs.space/author/anass-ez-zouaine)
- Published: 2026-10-11
- Topics: Laravel, VueJs

People searching “Fortify password reset Vue” add a `PasswordResetController` beside the one Fortify registered. Turn the feature on and post to Fortify. The [Fortify guide](https://laravel-vuejs.space/laravel-fortify-vue) is the rest of the auth surface.

> **TL;DR**
>
> -   Fortify already exposes the forgot-password and reset-password URLs.
> -   The Vue form posts those fields and no others.
> -   Do not branch the Vue page on “we found that user”.
> -   Do not put the new password in a query string, and do not email the new password back.
>
> **Who it's for:** Laravel + Vue developers
>
> **Applies to:** Laravel 13 · Vue 3

## The fix

`config/fortify.php` needs `Features::resetPasswords()`. The kit pages live under `resources/js/pages/auth/`. The forgot form sends one field:

```ts
form.post("/forgot-password");
```

`form.email` is the only key. Fortify always responds as if the address might exist. Do not branch the Vue page on “we found that user”.

The mail link opens the reset page with a token prop. That form posts:

```ts
form.token = token;
form.email = email;
form.post("/reset-password");
```

The fields are `token`, `email`, `password`, and `password_confirmation`. `form.errors.email` or `form.errors.password` is the failure. A 419 on this POST is the [session cookie](https://laravel-vuejs.space/laravel-sanctum-vue-spa), not a bad token.

## What to avoid

> **Gotcha**
>
> Do not put the new password in a query string, and do not email the new password back.

## FAQ

**Q: How do I reset a password with Fortify and Vue?**

Fortify already exposes the forgot-password and reset-password URLs. The Vue form posts those fields and no others.

**Q: What goes wrong with Fortify password reset Vue?**

Many developers add a `PasswordResetController` beside the one Fortify registered. Do not branch the Vue page on "we found that user".