Skip to main content
POST
Enable two-factor authentication

Authorizations

Authorization
string
header
required

Send your API token as Authorization: Bearer <api-token>. Tokens expire (30 days by default) and stop working when you change or reset your password.

Body

application/json
secretCode
string
required

The secretCode from POST /v1/two-fa/config.

token
string
required

Current 6-digit code from your authenticator app.

Required string length: 6

Response

Two-factor authentication is on.

recoveryCodes
string[]

8 single-use recovery codes, 10 characters each.