---
title: "Regenerate recovery codes"
method: POST
path: "/api/user/security/recovery-codes/regenerate"
tags: ["User"]
---

# Regenerate recovery codes

`POST /api/user/security/recovery-codes/regenerate`

## Request

- Base URL: `https://demo.hitkeep.com`
- URL: `https://demo.hitkeep.com/api/user/security/recovery-codes/regenerate`
- Auth: API key in cookie `hk_token`

Generates a new one-time set of backup recovery codes for the authenticated user.

## Response `200`

Recovery codes

- UserRecoveryCodesResponse
  - `codes` string[]
  - `remaining` integer

## Other responses

- `409`: Enable TOTP or register a passkey before generating recovery codes

---

[API](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api.md) · [All operations](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/revisions/bb2df36ab2a4?raw)