---
title: "Reveal a saved login"
method: POST
path: "/v1/logins/{id}/reveal"
tags: ["logins"]
---

# Reveal a saved login

`POST /v1/logins/{id}/reveal`

## Request

- Base URL: `https://api.pomerado.ai`
- URL: `https://api.pomerado.ai/v1/logins/{id}/reveal`
- Auth: HTTP bearer

Returns every value a saved login holds except its authenticator secret, and how many recovery codes are left.

Only the Dashboard shows the values, behind the Logins PIN. Elsewhere this returns a dashboard_url to the page that reveals them.

## Path parameters

- `id` string, required

## Response `200`

On the Dashboard: the values; Elsewhere: the page that reveals them

- union
  - LoginReveal
    - `username` string, required
    - `password` string, nullable, required
    - `email` string, nullable, required
    - `phone` string, nullable, required
    - `account_number` string, nullable, required
    - `date_of_birth` string, nullable, required
    - `zip` string, nullable, required
    - `preferred_method` 'sms' | 'call' | 'email' | 'authenticator' | 'push' | 'recovery_code', nullable, required: A two-factor method
    - `recovery_codes` object, nullable, required
      - `saved` integer, required: an integer
      - `unused` integer, required: an integer
      - `low` boolean, required: Few unused codes are left: add more
  - DashboardDelivery
    - `dashboard_url` string, required: A signed-in Dashboard page where the person finishes this and sees the secret once

## Other responses

- `400`: invalid_request
- `401`: unauthorized, reauthentication_required
- `403`: forbidden
- `404`: not_found
- `500`: internal_error
- `503`: temporarily_unavailable

---

[API](https://skmtc.dev/pomerado/apis/pomerado-api.md) · [All operations](https://skmtc.dev/pomerado/apis/pomerado-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pomerado/apis/pomerado-api/revisions/c07cea59691c?raw)