Changes the user's password and logs out all their devices by default; add "logout_devices":false to keep sessions alive. This is the same action as the v2 users PUT with a password field, and it is disabled with Matrix Authentication Service. Tell the user to sign in again afterwards. Nothing is sent to the user automatically, so notify them separately.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.