---
title: "Activates two-factor authentication with a TOTP code from the authenticator app."
method: POST
path: "/api/users/me/2fa/verify-setup"
tags: ["account"]
---

# Activates two-factor authentication with a TOTP code from the authenticator app.

`POST /api/users/me/2fa/verify-setup`

## Request

- Base URL: `https://api.pricklymails.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pricklymails.com/api/users/me/2fa/verify-setup`
- Auth: HTTP bearer

## Request body

- Verify2FASetupRequest: Request body for `POST /api/users/me/2fa/verify-setup`.
  - `code` string, required: A current TOTP code generated from the secret returned at enable time.

## Response `204`

2FA activated.

## Other responses

- `400`: No setup in progress, or the code is invalid.
- `401`: Missing or invalid JWT.
- `409`: 2FA is already enabled.

---

[API](https://skmtc.dev/pricklymails/apis/pricklymails-api.md) · [All operations](https://skmtc.dev/pricklymails/apis/pricklymails-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pricklymails/apis/pricklymails-api/revisions/b4225a92d8fb?raw)