---
title: "Disable 2FA for a user"
method: DELETE
path: "/users/{userId}/two-factor-authentication"
tags: ["Users"]
---

# Disable 2FA for a user

`DELETE /users/{userId}/two-factor-authentication`

Administratively disables two-factor authentication for the
target user, removing any registered authenticator and recovery
codes. Use this when a user has lost access to their second
factor and the caller has verified the user's identity through
another channel.

## Query parameters

- `site_id` string, uuid, required

## Response `204`

2FA was successfully disabled for the user.

## Other responses

- `401` — The user is unauthenticated
- `403` — The authenticated user does not have permission.
- `404` — The resource couldn't be found

---

[API](https://skmtc.dev/try/apis/trybe-api.md) · [All operations](https://skmtc.dev/try/apis/trybe-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/try/trybe-api/revisions/f37f92702da5/schema)