diff --git a/backend/api/handler/coze/passport_service.go b/backend/api/handler/coze/passport_service.go
index 57e77c0249..da8b0e41e8 100644
--- a/backend/api/handler/coze/passport_service.go
+++ b/backend/api/handler/coze/passport_service.go
@@ -113,9 +113,9 @@ func PassportWebEmailLoginPost(ctx context.Context, c *app.RequestContext) {
 	c.JSON(http.StatusOK, resp)
 }
 
-// PassportWebEmailPasswordResetGet .
-// @router /passport/web/email/password/reset/ [GET]
-func PassportWebEmailPasswordResetGet(ctx context.Context, c *app.RequestContext) {
+// PassportWebEmailPasswordResetPost .
+// @router /passport/web/email/password/reset/ [POST]
+func PassportWebEmailPasswordResetPost(ctx context.Context, c *app.RequestContext) {
 	var err error
 	var req passport.PassportWebEmailPasswordResetGetRequest
 	err = c.BindAndValidate(&req)
diff --git a/backend/api/model/passport/passport.go b/backend/api/model/passport/passport.go
index 47144ff8be..de6b32ed3e 100644
--- a/backend/api/model/passport/passport.go
+++ b/backend/api/model/passport/passport.go
@@ -2013,9 +2013,9 @@ func (p *PassportWebEmailLoginPostResponse) String() string {
 }
 
 type PassportWebEmailPasswordResetGetRequest struct {
-	Password string `thrift:"password,1" form:"password" json:"password" query:"password"`
-	Code     string `thrift:"code,2" form:"code" json:"code" query:"code"`
-	Email    string `thrift:"email,3" form:"email" json:"email" query:"email"`
+	Password string `thrift:"password,1" form:"password" json:"password"`
+	Code     string `thrift:"code,2" form:"code" json:"code"`
+	Email    string `thrift:"email,3" form:"email" json:"email"`
 }
 
 func NewPassportWebEmailPasswordResetGetRequest() *PassportWebEmailPasswordResetGetRequest {
diff --git a/backend/api/router/coze/api.go b/backend/api/router/coze/api.go
index ed15fb0824..a71ccae149 100644
--- a/backend/api/router/coze/api.go
+++ b/backend/api/router/coze/api.go
@@ -278,7 +278,7 @@ func Register(r *server.Hertz) {
 						_password := _email.Group("/password", _passwordMw()...)
 						{
 							_reset := _password.Group("/reset", _resetMw()...)
-							_reset.GET("/", append(_passportwebemailpasswordresetgetMw(), coze.PassportWebEmailPasswordResetGet)...)
+							_reset.POST("/", append(_passportwebemailpasswordresetgetMw(), coze.PassportWebEmailPasswordResetPost)...)
 						}
 					}
 					{
diff --git a/frontend/packages/arch/api-schema/src/idl/passport/passport.ts b/frontend/packages/arch/api-schema/src/idl/passport/passport.ts
index 136a1bbb68..3f020ffc8b 100644
--- a/frontend/packages/arch/api-schema/src/idl/passport/passport.ts
+++ b/frontend/packages/arch/api-schema/src/idl/passport/passport.ts
@@ -132,11 +132,11 @@ export const PassportWebEmailLoginPost = /*#__PURE__*/createAPI<PassportWebEmail
 /** Reset password via email */
 export const PassportWebEmailPasswordResetGet = /*#__PURE__*/createAPI<PassportWebEmailPasswordResetGetRequest, PassportWebEmailPasswordResetGetResponse>({
   "url": "/api/passport/web/email/password/reset/",
-  "method": "GET",
+  "method": "POST",
   "name": "PassportWebEmailPasswordResetGet",
   "reqType": "PassportWebEmailPasswordResetGetRequest",
   "reqMapping": {
-    "query": ["password", "code", "email"]
+    "body": ["password", "code", "email"]
   },
   "resType": "PassportWebEmailPasswordResetGetResponse",
   "schemaRoot": "api://schemas/idl_passport_passport",
diff --git a/idl/passport/passport.thrift b/idl/passport/passport.thrift
index 5c1fb3b5e6..4093b49924 100644
--- a/idl/passport/passport.thrift
+++ b/idl/passport/passport.thrift
@@ -116,7 +116,7 @@ service PassportService {
 
 
     // Reset password via email
-    PassportWebEmailPasswordResetGetResponse PassportWebEmailPasswordResetGet(1: PassportWebEmailPasswordResetGetRequest req) (api.get="/api/passport/web/email/password/reset/")
+    PassportWebEmailPasswordResetGetResponse PassportWebEmailPasswordResetGet(1: PassportWebEmailPasswordResetGetRequest req) (api.post="/api/passport/web/email/password/reset/")
 
     // account information
     PassportAccountInfoV2Response PassportAccountInfoV2(1: PassportAccountInfoV2Request req) (api.post="/api/passport/account/info/v2/")