# Reset password supabase **URL:** \ **Category:** Ask us anything\ **Created:** [July 30, 2023, 1:01am UTC](https://community.weweb.io/t/reset-password-supabase/3714 "2023-07-30T01:01:17Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Ewerton](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/ewerton/32/6401_2.png) [@Ewerton](https://community.weweb.io/u/Ewerton)\ **Post date:** [July 30, 2023, 1:01am UTC](https://community.weweb.io/t/reset-password-supabase/3714/1 "2023-07-30T01:01:17Z")
Hello I need help setting up password reset in subbase. Not sure what to fill in the “Email Templante”. When I test it I get this error {“message”:“No API key found in request”,“hint”:“No `apikey` request header or url param was found.”} ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/4/477d9baa5b4e56da132d661ff2c892110bdd6250.png) ---
**Author:** ![visualdevs](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/visualdevs/32/6248_2.png) [@visualdevs](https://community.weweb.io/u/visualdevs)\ **Post date:** [September 20, 2023, 1:39pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/2 "2023-09-20T13:39:41Z")
Did you solved it? I’m having the same question. ---
**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\ **Post date:** [September 20, 2023, 1:42pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/3 "2023-09-20T13:42:44Z")
Hello 👋 You can but don’t need to change anything in the Supabase email template. Can you show us how things are configured on the WeWeb side of things? Are you using the [Supabase Auth plugin in WeWeb](https://docs.weweb.io/plugins/auth-systems/supabase-auth.html#reset-password-flow)? ---
**Author:** ![visualdevs](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/visualdevs/32/6248_2.png) [@visualdevs](https://community.weweb.io/u/visualdevs)\ **Post date:** [September 20, 2023, 1:57pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/4 "2023-09-20T13:57:11Z")
Hey Joyce, yes I have the Auth Supabase plugin installed. I see the workflow “change password” I assume that’s the one. I’m not sure how should I build the reset password page? I have these 2 questions if you can help me please: -The page should have a particular URL path? -what inputs and/or workflows should have? ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/c/c88d8490f402b7e476e5f3ceca689322d249e0f7.png) ---
**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\ **Post date:** [September 20, 2023, 2:13pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/5 "2023-09-20T14:13:27Z")
Ok cool. The page doesn’t need to have a specific URL path. Check out the step by step guide here: [Supabase authentication | WeWeb documentation](https://docs.weweb.io/plugins/auth-systems/supabase-auth.html#reset-password-flow) I’ll be recording a video on the topic but most likely only tomorrow or Friday 🙂 ---
**Author:** ![visualdevs](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/visualdevs/32/6248_2.png) [@visualdevs](https://community.weweb.io/u/visualdevs)\ **Post date:** [September 20, 2023, 2:35pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/6 "2023-09-20T14:35:48Z")
Awesome thank you! That helped me a lot ---
**Author:** ![sleeusis](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@sleeusis](https://community.weweb.io/u/sleeusis)\ **Post date:** [June 10, 2024, 7:36pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/7 "2024-06-10T19:36:58Z")
Greetings @Joyce or anyone in the community that can shed some lights on user request to reset password on Supabase Auth. I got to the point where the email is received and password can be changed. Now, how can I prevent users from calling the change-password page from the URL as the page is public? Thank you ---
**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\ **Post date:** [June 11, 2024, 3:47pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/8 "2024-06-11T15:47:36Z")
Hi @sleeusis 👋 > [@sleeusis](#): > > Now, how can I prevent users from calling the change-password page from the URL as the page is public? I’m sorry, I don’t understand the question. What is your concern? ---
**Author:** ![sleeusis](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@sleeusis](https://community.weweb.io/u/sleeusis)\ **Post date:** [June 11, 2024, 4:32pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/9 "2024-06-11T16:32:10Z")
My concern is that https:\www.mydomain\change-password is accessible by typing the url. I know it won’t do anything if the token is invalid, etc but still the page shows. I can always add some JS to prevent it from showing but was wondering if there were some other more elegant way to do this ---
**Author:** ![Micah](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/micah/32/9102_2.png) [@Micah](https://community.weweb.io/u/Micah)\ **Post date:** [June 11, 2024, 4:50pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/10 "2024-06-11T16:50:22Z")
You can add a page workflow to redirect the user to a different page, with a pass-through condition based on if the user is not logged in ---
**Author:** ![sleeusis](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@sleeusis](https://community.weweb.io/u/sleeusis)\ **Post date:** [June 12, 2024, 2:49pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/11 "2024-06-12T14:49:03Z")
That is what I did before but rather than using a pass-through I used a custom JS to check on authenticated user, process errors and ion nvalid calls then show a message redir to main page. But I was wondering if there was a weweb builtin way to do this. I guessed this will have to do. Thank you for your reply ---
**Author:** ![Alexis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/alexis/32/13248_2.png) [@Alexis](https://community.weweb.io/u/Alexis)\ **Post date:** [June 12, 2024, 3:03pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/12 "2024-06-12T15:03:27Z")
You can make your page private, it’s built-in ![Capture d’écran 2024-06-12 à 17.03.21](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/2/263fbaf6d3e545297ba0f56198396143a75255e6.png) Sorry, maybe I misunderstood and you don’t want an authenticated user to access the page ? ---
**Author:** ![sleeusis](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@sleeusis](https://community.weweb.io/u/sleeusis)\ **Post date:** [June 12, 2024, 3:45pm UTC](https://community.weweb.io/t/reset-password-supabase/3714/13 "2024-06-12T15:45:26Z")
this is for the change-password page that will be called from a valid password reset request link in the email sent by Supabase. I believe the page needs to be set public. It is fine as I have it working via a custom js on the onload workflow. Thanks anyway