Regenerate recovery codes

Mints a fresh set of 8 recovery codes, replacing (and invalidating) the previous set. TOTP code only — a found recovery code must not be able to mint itself seven new siblings. 400 if 2FA is not enabled or the code is invalid or not a TOTP code. Shares the per-user 5 code attempts per minute limiter with setup, confirm, disable, and login phase 2.

post/auth/totp/recovery-codes

Request

  • Base URL: https://app.yoping.me/api/v1
  • URL: https://app.yoping.me/api/v1/auth/totp/recovery-codes
  • Auth: API key in cookie yp_session

Request body

codestring required

A 6-digit TOTP code. Recovery codes are not accepted for regeneration.

Response

New recovery codes generated; raw codes returned once.

Changes

No recorded changes to this operation across all 1 revision of this API.