---
title: "Start TOTP enrolment"
method: POST
path: "/v2/users/me/mfa/totp"
tags: ["Users"]
---

# Start TOTP enrolment

`POST /v2/users/me/mfa/totp`

## Request

- Base URL: `https://api.chat.ethora.com`
- URL: `https://api.chat.ethora.com/v2/users/me/mfa/totp`
- Auth: HTTP bearer

Generates a new secret and parks it as *pending*; MFA is not enabled
until `POST /v2/users/me/mfa/totp/confirm` succeeds with a first code
(within 15 minutes). The secret and the `otpauth://` URI are returned
once, for a QR code or manual entry in an authenticator app. Accounts
with a password must supply it.

## Request body

- object
  - `password` string

## Response `200`

`{ secret, otpauthUri, issuer, account, digits: 6, period: 30, expiresInSeconds }`

## Other responses

- `400`: Bad Request
- `401`: `WRONG_CREDENTIALS`
- `403`: Forbidden
- `404`: Not Found
- `409`: `MFA_ALREADY_ENABLED`
- `422`: Unprocessable Entity
- `500`: Internal Server Error

---

[API](https://skmtc.dev/ethora/apis/platform-api.md) · [All operations](https://skmtc.dev/ethora/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ethora/apis/platform-api/revisions/01b6e64378ee?raw)