---
title: "Update Mfa Settings"
method: PATCH
path: "/admin/settings/security/mfa"
tags: ["admin", "admin:settings"]
---

# Update Mfa Settings

`PATCH /admin/settings/security/mfa`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/admin/settings/security/mfa`
- Auth: API key in cookie `fastapiusersauth`

Require a security key at sign-in for platform admins.

``TRACECAT__PLATFORM_ADMIN_MFA_BYPASS`` is the break-glass override.

## Request body

- MfaPolicyUpdate
  - `mfa_required` boolean, required: Require a security key or passkey at sign-in. Users without one must register one at their next sign-in.

## Response `200`

Successful Response

- MfaPolicyRead
  - `mfa_required` boolean, required
  - `webauthn_available` boolean, required
  - `webauthn_unavailable_reason` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)