Sign in
Authentication

Remove a registered passkey. Requires a step-up proof. (Roles: user)

delete/auth/2fa/webauthn/{credentialId}

Path parameters

credentialIdstring required

Request body

totp_codestring
recovery_codestring
webauthn_assertionobject

Response

Success

disabledboolean

True when this was the last passkey and no authenticator app was confirmed, so removing it turned two-factor authentication off entirely rather than leaving an unsatisfiable requirement.

tokenstring

Present only when disabled is true.

Changes

Changed in 1 of the 8 revisions of this API.1