---
title: "Update user security settings"
method: PATCH
path: "/v1/auth/settings"
tags: ["Authentication"]
---

# Update user security settings

`PATCH /v1/auth/settings`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/settings`
- Auth: HTTP bearer

Disabling `require_passkey_for_vaults` requires `X-Auth-Confirm`
(purpose `security.vault_passkey.disable`) with a passkey or TOTP
when either is enrolled.

Disabling `require_passkey_for_mfa` requires `X-Auth-Confirm`
(purpose `security.mfa_passkey.disable`) with a passkey or TOTP
when either is enrolled.

## Headers

- `X-Auth-Confirm` string

## Request body

- object
  - `require_passkey_for_vaults` boolean
  - `require_passkey_for_mfa` boolean

## Response `200`

Updated settings

## Other responses

- `403`: Insufficient permissions

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)