My account

Create or replace the authenticator app

Create or replace the user's TOTP MFA verification with a new authenticator app binding. If the user already has a TOTP verification, it will be replaced; otherwise, a new one will be created. Requires a logto-verification-id header for sensitive permission checks, a valid TOTP secret, and a valid TOTP code generated from the secret.

put/api/my-account/mfa-verifications/totp

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/my-account/mfa-verifications/totp
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Request body

secretstring required

The TOTP secret for the authenticator app.

codestring required

The TOTP code generated from the secret to confirm the binding.

Response

The authenticator app was created or replaced successfully.

Changes

No recorded changes to this operation across all 8 revisions of this API.