---
title: "Start TOTP setup"
method: POST
path: "/api/user/security/totp/setup/start"
tags: ["User"]
---

# Start TOTP setup

`POST /api/user/security/totp/setup/start`

## Request

- Base URL: `https://demo.hitkeep.com`
- URL: `https://demo.hitkeep.com/api/user/security/totp/setup/start`
- Auth: API key in cookie `hk_token`

Starts TOTP enrollment and returns secret + OTPAuth URI.

## Response `200`

TOTP setup

- UserTOTPSetup
  - `expires_at` string, date-time
  - `otpauth_url` string
  - `secret` string

---

[API](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api.md) · [All operations](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/revisions/bb2df36ab2a4?raw)