---
title: "Unlock this session with the PIN"
method: POST
path: "/auth/app-lock/verify"
tags: ["auth"]
---

# Unlock this session with the PIN

`POST /auth/app-lock/verify`

Five wrong attempts mark the lock for reset and drop every unlock window the user holds. A correct PIN under the limit clears a pending reset, so a user whose reset was requested by someone else with access to their session is not locked out of a PIN they still know.

## Request body

- VerifyAppLockDto
  - `pin` string, required — The PIN to verify, 4-6 digits

## Response `204`

Unlocked

## Other responses

- `401` — Incorrect PIN
- `403` — Attempts exhausted

---

[API](https://skmtc.dev/dre/apis/dre-api.md) · [All operations](https://skmtc.dev/dre/apis/dre-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/dre/dre-api/revisions/5d14beb9482b/schema)