# Experience user password **URL:** \ **Category:** Help\ **Tags:** experience\ **Created:** [August 20, 2022, 6:30pm UTC](https://forums.losant.com/t/experience-user-password/4698 "2022-08-20T18:30:45Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Sreyams\_Jain](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@Sreyams\_Jain](https://forums.losant.com/u/Sreyams_Jain)\ **Post date:** [August 20, 2022, 6:30pm UTC](https://forums.losant.com/t/experience-user-password/4698/1 "2022-08-20T18:30:46Z")
Is there an API to retrieve an experience user’s password knowing the experience userid? ---
**Author:** ![Dylan\_Schuster](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.losant.com/dylan_schuster/32/2850_2.png) [@Dylan\_Schuster](https://forums.losant.com/u/Dylan_Schuster)\ **Post date:** [August 20, 2022, 7:30pm UTC](https://forums.losant.com/t/experience-user-password/4698/2 "2022-08-20T19:30:05Z")
No, for security purposes we never expose an Experience User’s password. There is, however, an API to change a user’s password: the [Experience User: Patch endpoint](https://docs.losant.com/rest-api/experience-user/#patch). You can also change it through the [User: Update Node](https://docs.losant.com/workflows/experience/update-user/). If you are trying to build an Experience User password reset flow, we do have an entry in our Template Library demonstrating how to do it. I recommend importing that template instead of trying to build that yourself. ---
**Author:** ![Sreyams\_Jain](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@Sreyams\_Jain](https://forums.losant.com/u/Sreyams_Jain)\ **Post date:** [August 20, 2022, 7:53pm UTC](https://forums.losant.com/t/experience-user-password/4698/3 "2022-08-20T19:53:44Z")
The reason I want to get/verify the password of the user is I am building an Android phone Login app and get access to some device info etc if the password matches. Is there any other way to validate login userid and password on phone app? ---
**Author:** ![Sreyams\_Jain](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@Sreyams\_Jain](https://forums.losant.com/u/Sreyams_Jain)\ **Post date:** [August 20, 2022, 7:58pm UTC](https://forums.losant.com/t/experience-user-password/4698/4 "2022-08-20T19:58:13Z")
My web app and phone app will be bit different. I want the phone app after successful login to go to a different homepage than the web app ---
**Author:** ![Sreyams\_Jain](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@Sreyams\_Jain](https://forums.losant.com/u/Sreyams_Jain)\ **Post date:** [August 21, 2022, 4:27pm UTC](https://forums.losant.com/t/experience-user-password/4698/5 "2022-08-21T16:27:41Z")
I have an assigned experience user. Using the below api [https://api.losant.com/auth/user](https://api.losant.com/auth/user) I get the following response. Not sure why? { “type”: “Unauthorized”, “message”: “Unauthorized” } The correct email and password is given in the body. But it works for other assigned users. ---
**Author:** ![Dylan\_Schuster](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.losant.com/dylan_schuster/32/2850_2.png) [@Dylan\_Schuster](https://forums.losant.com/u/Dylan_Schuster)\ **Post date:** [August 21, 2022, 5:58pm UTC](https://forums.losant.com/t/experience-user-password/4698/6 "2022-08-21T17:58:49Z")
> Is there any other way to validate login userid and password on phone app? You can authenticate Experience Users with the [Authenticate Node](https://docs.losant.com/workflows/experience/authenticate/). Given an email address and password submitted through an Experience Endpoint POST request, you can provide them to the node to determine if the user’s credentials are correct and issue a token in the reply if so. > I have an assigned experience user. Using the below api > [https://api.losant.com/auth/user](https://api.losant.com/auth/user) > I get the following response. Not sure why? That endpoint is for authenticating a Losant user against the Losant API - not an Experience User against your End User Experience. You’ll need to build your own endpoint to authenticate against, using the workflow engine to validate credentials passed in the request as described above. * * * We have a lot of educational resources around building out an application experience, including: - [How to Build an Experience](https://docs.losant.com/guides/building-an-experience/overview/) - [Experiences Overview](https://docs.losant.com/experiences/overview/) (plus documentation on all the resources and workflows nodes, including the REST API endpoints for setting them up) - [Losant University course](https://losant.learnupon.com/enrollments/65578044/details) - [Building Application Experiences Deeper Dive Webinar](https://www.losant.com/deeper-dive-webinar-replay-building-application-experiences) - A number of entries for building APIs, interfaces, and components in our [Template Library](https://app.losant.com/applications/recent/template-library) ---
**Author:** ![Brandon\_Cannaday](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.losant.com/brandon_cannaday/32/14_2.png) [@Brandon\_Cannaday](https://forums.losant.com/u/Brandon_Cannaday)\ **Post date:** [August 21, 2022, 7:08pm UTC](https://forums.losant.com/t/experience-user-password/4698/7 "2022-08-21T19:08:42Z")
The specific template that provides an experience user auth endpoint is called “Experience Authentication Endpoint” and it can be imported into your application here: [https://app.losant.com/applications/recent/template-library/5fb57432758bd20541c47b32?templateId=5fb5743a758bd20541c47b33](https://app.losant.com/applications/recent/template-library/5fb57432758bd20541c47b32?templateId=5fb5743a758bd20541c47b33)