---
title: "Reset a user's MFA (owner / admin recovery)"
method: DELETE
path: "/v2/apps/{appId}/users/{userId}/mfa"
tags: ["Users"]
---

# Reset a user's MFA (owner / admin recovery)

`DELETE /v2/apps/{appId}/users/{userId}/mfa`

## Request

- Base URL: `https://api.chat.ethora.com`
- URL: `https://api.chat.ethora.com/v2/apps/{appId}/users/{userId}/mfa`
- Auth: HTTP bearer

Clears the user's MFA so they can sign in with their password again
(lost device, no backup codes) and ends all of their sessions.
Tenant-actor authenticated: needs `appUsers.update` or
`appSettings.update` on the app (or B2B / super admin).

## Path parameters

- `appId` string, required
- `userId` string, required

## Response `200`

`{ success: true, userId, wasEnabled: boolean, sessionsRevoked: number }`

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: `USER_NOT_FOUND` (also when the user belongs to another app)
- `422`: Unprocessable Entity
- `500`: Internal Server Error

---

[API](https://skmtc.dev/ethora/apis/platform-api.md) · [All operations](https://skmtc.dev/ethora/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ethora/apis/platform-api/revisions/01b6e64378ee?raw)