---
title: "Remove the app-lock PIN"
method: POST
path: "/auth/app-lock/remove"
tags: ["auth"]
---

# Remove the app-lock PIN

`POST /auth/app-lock/remove`

Always requires the current PIN. A PIN-less removal would be callable from devtools on a locked session and would defeat the lock entirely; a user who has forgotten theirs uses `POST /auth/app-lock/forgot`.

## Request body

- RemoveAppLockDto
  - `currentPin` string, required — The current PIN. Removal always proves knowledge of it: a PIN-less removal would be callable from devtools and would defeat the lock entirely. A user who has forgotten it uses POST /auth/app-lock/forgot.

## Response `204`

Lock removed

## Other responses

- `401` — Incorrect PIN
- `423` — Session is locked

---

[API](https://skmtc.dev/dre/apis/dre-api.md) · [All operations](https://skmtc.dev/dre/apis/dre-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/dre/dre-api/revisions/5d14beb9482b/schema)