diff --git a/src/saas/bkuser_shell/config/common/system.py b/src/saas/bkuser_shell/config/common/system.py
index 0d1ff2720..953213707 100644
--- a/src/saas/bkuser_shell/config/common/system.py
+++ b/src/saas/bkuser_shell/config/common/system.py
@@ -21,6 +21,9 @@
     r"/api/v1/web/passwords/reset/send_email/$",
     r"/api/v1/web/passwords/reset/by_token/$",
     r"/api/v1/web/version_logs/$",
+    r"/api/v1/web/passwords/settings/by_token/$",
+    r"/api/v1/web/passwords/reset/verification_code/send_sms/$",
+    r"/api/v1/web/passwords/reset/verification_code/verify/$",
     # r"/reset_password$",
     # r"/set_password$",
 )
diff --git a/src/saas/bkuser_shell/proxy/urls.py b/src/saas/bkuser_shell/proxy/urls.py
index 934002e32..4f0e73351 100644
--- a/src/saas/bkuser_shell/proxy/urls.py
+++ b/src/saas/bkuser_shell/proxy/urls.py
@@ -31,6 +31,21 @@
         CommonProxyNoAuthViewSet.as_view({"post": "request"}),
         name="common.no_auth.proxy.3",
     ),
+    path(
+        "api/v1/web/passwords/settings/by_token/",
+        CommonProxyNoAuthViewSet.as_view({"get": "request"}),
+        name="common.no_auth.proxy.4",
+    ),
+    path(
+        "api/v1/web/passwords/reset/verification_code/send_sms/",
+        CommonProxyNoAuthViewSet.as_view({"post": "request"}),
+        name="common.no_auth.proxy.5",
+    ),
+    path(
+        "api/v1/web/passwords/reset/verification_code/verify/",
+        CommonProxyNoAuthViewSet.as_view({"post": "request"}),
+        name="common.no_auth.proxy.6",
+    ),
     # NOTE: 前端暂时切换成这个
     path(
         "api/v1/web/version_logs/",