---
title: "Obtain a decryption key for a user"
method: GET
path: "/api/secret"
tags: ["Sessions"]
---

# Obtain a decryption key for a user

`GET /api/secret`

Given a username and password, returns the encryption secret required
to decrypt that user's stored interview answers in API calls.

## Query parameters

- `username` string, email, required
- `password` string, required

## Response `200`

Decryption secret.

- string

## Other responses

- `400` — Missing parameters.
- `403` — Authentication failed or 2FA enabled.

---

[API](https://skmtc.dev/docassemble/apis/docassemble-api.md) · [All operations](https://skmtc.dev/docassemble/apis/docassemble-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/docassemble/docassemble-api/revisions/a75d7eea6826/schema)