Sign in
Users

Set WebAuthn two-factor authentication

Choose whether registered passkeys are required as a second factor when signing in with email and password. Enabling requires at least one registered credential and mints backup codes when the account has none. Requires sudo mode verification.

put/users/@me/mfa/webauthn/two-factor

Request body

enabledboolean required

Whether registered passkeys count as a second factor when logging in

passwordstring
mfa_method'totp' | 'webauthn'

MFA method to use for verification

mfa_codestring

MFA verification code from an authenticator app

webauthn_challengestring

WebAuthn challenge string

Response

Success

Changes