I would like to add a password change field to my site that asks for both the new and old password. If the old password matches, then I would like to perform a password change. I would like to do this without having to email the user. Looking at https://auth0.com/docs/connections/database/password-change#using-the-management-api , there does not seem to be a way to validate the old password. Is there anyway to do so?