---
title: "Admin portal: start linking an authenticator app. Returns a QR code."
method: POST
path: "/api/auth/admin/2fa/totp/setup"
tags: ["Admin portal auth"]
---

# Admin portal: start linking an authenticator app. Returns a QR code.

`POST /api/auth/admin/2fa/totp/setup`

## Request

- Base URL: `https://api.rewritelifestyle.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.rewritelifestyle.ai/api/auth/admin/2fa/totp/setup`
- Auth: HTTP bearer

## Request body

- AdminMfaPasswordDto
  - `password` string, required: Current password, to confirm it is really the user

## Response `200`

## Changes

- **2026-11-07** `0ddc49451c22`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/changes/api/auth/admin/2fa/totp/setup/post.md)

---

[API](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api.md) - [All operations](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/revisions/0d22636dfcb9?raw)