---
title: "Turn the second factor off"
method: POST
path: "/v1/auth/2fa/disable"
tags: ["Auth"]
---

# Turn the second factor off

`POST /v1/auth/2fa/disable`

## Request

- Base URL: `https://api.briefgate.dev`
- URL: `https://api.briefgate.dev/v1/auth/2fa/disable`
- Auth: HTTP bearer

Requires a current code, not merely a session: otherwise a stolen session would be enough to strip the factor away, and it would protect nothing.

## Request body

- object
  - `code` string, required

## Response `204`

Disabled

## Other responses

- `401`: The code is not valid
- `409`: Not enabled
- `422`: Validation error — the body shape is correct but values are invalid

---

[API](https://skmtc.dev/briefgate/apis/briefgate-api.md) · [All operations](https://skmtc.dev/briefgate/apis/briefgate-api/llms.txt) · [OpenAPI document](https://skmtc.dev/briefgate/apis/briefgate-api/revisions/b21afed4748b?raw)