---
title: "Totp Setup"
method: POST
path: "/auth/2fa/totp/setup"
---

# Totp Setup

`POST /auth/2fa/totp/setup`

## Request

- Base URL: `https://safefamilyapp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://safefamilyapp.com/auth/2fa/totp/setup`
- Auth: HTTP bearer

Start authenticator-app setup: a secret to scan; nothing changes until a code confirms it.
Needs the password: a session alone must not be able to replace the owner's second factor.

## Request body

- PasswordConfirm
  - `password` string, required

## Response `200`

Successful Response

- TotpSetupOut
  - `secret` string, required
  - `otpauth_uri` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/safefamilyapp/apis/otri-api.md) · [All operations](https://skmtc.dev/safefamilyapp/apis/otri-api/llms.txt) · [OpenAPI document](https://skmtc.dev/safefamilyapp/apis/otri-api/revisions/d07bb03cb836?raw)