---
title: "Update a user's MFA factor."
method: PUT
path: "/admin/users/{userId}/factors/{factorId}"
tags: ["admin"]
---

# Update a user's MFA factor.

`PUT /admin/users/{userId}/factors/{factorId}`

## Request body

- object

## Response `200`

User's MFA factor.

- MFAFactorSchema — Represents a MFA factor.
  - `id` string, uuid
  - `status` string — Usually one of: - verified - unverified
  - `friendly_name` string
  - `factor_type` string — Usually one of: - totp

## Other responses

- `401` — HTTP Unauthorizred response.
- `403` — HTTP Forbidden response.
- `404` — There is no such user and/or factor.

## Changes

- **2023-02-01** `144a34ca6d74` — 11 warning
  - removed the optional property `created_at` from the response with the `200` status
  - removed the optional property `error_code` from the response with the `401` status
  - removed the optional property `error_code` from the response with the `403` status
  - removed the optional property `error_code` from the response with the `404` status
  - …7 more

[Change history](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/admin/users/:userId/factors/:factorId/put.md)

---

[API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/revisions/144a34ca6d74/schema)