---
title: "Get user security status"
method: GET
path: "/api/user/security"
tags: ["User"]
---

# Get user security status

`GET /api/user/security`

## Request

- Base URL: `https://demo.hitkeep.com`
- URL: `https://demo.hitkeep.com/api/user/security`
- Auth: API key in cookie `hk_token`

Returns TOTP/passkey status.

## Response `200`

Security status

- UserSecurityStatus
  - `passkeys` UserPasskey[]
    - `created_at` string, date-time
    - `id` string, uuid
    - `name` string
    - `updated_at` string, date-time
  - `password_login_enabled` boolean
  - `recovery_codes_generated` boolean
  - `recovery_codes_remaining` integer
  - `social_identities` UserSocialIdentity[]
    - `last_used_at` string, date-time
    - `linked_at` string, date-time, required
    - `observed_email` string, email
    - `provider` 'google' | 'github' | 'microsoft', required
  - `totp_enabled` boolean
  - `totp_pending` boolean

---

[API](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api.md) · [All operations](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/revisions/bb2df36ab2a4?raw)