---
title: "Disable a user's TOTP (admin only)"
method: POST
path: "/users/admin/totp/disable"
tags: ["Users"]
---

# Disable a user's TOTP (admin only)

`POST /users/admin/totp/disable`

Clears another user's TOTP secret, enabled flag and backup codes so they can log in without 2FA.

## Request body

- object
  - `userId` string

## Response `200`

TOTP disabled for the user.

## Other responses

- `400` — User ID is required or TOTP is not enabled.
- `403` — Admin access required.
- `404` — User not found.
- `500` — Failed to disable TOTP.

---

[API](https://skmtc.dev/termix/apis/termix-api.md) · [All operations](https://skmtc.dev/termix/apis/termix-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/termix/termix-api/revisions/f4ef343eff1b/schema)