---
title: "/verify-two-factor-login"
method: POST
path: "/verify-two-factor-login"
---

# /verify-two-factor-login

`POST /verify-two-factor-login`

## Request body

- object
  - `challenge_token` string, required
  - `code` string, required

## Response `200`

Successful response

- object

## Other responses

- `422` — Validation failed
- `500` — Server error

## Changes

> 37 revisions in range; 2 not diffed.

- **2026-08-24** `fea859ba34de` — 3 breaking
  - request body became required
  - the request property `challenge_token` became required
  - the request property `code` became required
- **2026-08-08** `eca3457f01d0` — 2 breaking, 1 warning
  - the `challenge_token` request property's minLength was increased from `0` to `1`
  - the `code` request property's minLength was increased from `0` to `6`
  - the `code` request property's maxLength was set to `6`
- **2026-08-08** `5605cf1dc74f` — 1 info
  - added optional request body
- **2026-07-22** `4363092ca0cf` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/stacksjs/apis/stacks-api/changes/verify-two-factor-login/post.md)

---

[API](https://skmtc.dev/stacksjs/apis/stacks-api.md) · [All operations](https://skmtc.dev/stacksjs/apis/stacks-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/stacksjs/stacks-api/revisions/99a2bc4b3b98/schema)