Sign in
Authentication

Finish passkey enrolment with the authenticator's attestation. (Roles: user)

The mutating half of the ceremony, and the ONLY place a step-up proof is required when adding a passkey to an account that already has 2FA: send exactly one of totp_code, recovery_code or webauthn_assertion alongside the attestation. First-time enrolment on an unprotected account needs no proof.

post/auth/2fa/webauthn/register

Request body

attestationobject required

The authenticator's response to the register-options challenge.

namestring

User-visible label for the passkey. Defaults to "Passkey".

totp_codestring
recovery_codestring
webauthn_assertionobject

Response

Success

recovery_codesstring[]

Same exactly-once rule as TwoFactorEnrollResponse.

tokenstring

Present only when this passkey is what enabled 2FA.

Changes

Changed in 1 of the 8 revisions of this API.1