Users

Set WebAuthn two-factor authentication

Choose whether registered passkeys are required as a second factor when signing in with email and password. Enabling requires at least one registered credential and mints backup codes when the account has none. Requires sudo mode verification.

put/users/@me/mfa/webauthn/two-factor

Request body

enabledboolean required

Whether registered passkeys count as a second factor when logging in

passwordstring

mfa_method'totp' | 'webauthn'

MFA method to use for verification

mfa_codestring

MFA verification code from an authenticator app

webauthn_challengestring

WebAuthn challenge string

Response

Success

Changes

Changed in 1 of the 21 revisions of this API.1

Sep 20, 20265296f41cd55d1See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 8 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Of the 21 revisions, 2 have no diff computed.

Full history