---
title: "Verify signedPasskeyData from a passkey login"
method: POST
path: "/passkey/verifySignedData"
tags: ["Passkeys"]
---

# Verify signedPasskeyData from a passkey login

`POST /passkey/verifySignedData`

Verifies the `signedPasskeyData` from a passkey login. The `signedPasskeyData` is returned by the [finish](/api-reference/backend-api/passkeys/finish-login-with-an-existing-passkey) call and is essential for transferring the authentication state to your backend.

It is required only for [Corbado Connect](/corbado-connect) and is thoroughly explained in our [Documentation](/corbado-connect/concepts/signed-passkey-data). Our [generic integration guide](/corbado-connect/integration/generic) explains how to use `signedPasskeyData` in your backend.

## Request body

- PasskeyVerifySignedDataReq
  - `signedPasskeyData` string, required
  - `username` string, required

## Response `200`

`signedPasskeyData` has been verified.

- PasskeyVerifySignedDataRsp
  - `verificationResult` 'success' | 'invalid_signature' | 'invalid_challenge' | 'user_mismatch' | 'generic_error', required

## Other responses

- `default` — Error

---

[API](https://skmtc.dev/corbado/apis/corbado-backend-api.md) · [All operations](https://skmtc.dev/corbado/apis/corbado-backend-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/corbado/corbado-backend-api/revisions/1f6143efe426/schema)