# User Service: Change Password ## What to Do - Implement API endpoint to change authenticated user password. - Allow logged-in users to change password. - Require **current password** before setting a new one. - Validate new password using the same rules as FR1.2. - Confirm new password by typing it twice. ## References - Product Backlog: [FR4.2, FR4.2.1, FR4.2.2, FR4.2.3](https://docs.google.com/document/d/1DokYROrrlD4HXa1iXcaYqqO_ToTkWOkmm1tGLKdOSU4/edit?usp=sharing)