---
title: "Verify backup code"
method: POST
path: "/totp/verify-backup-code"
tags: ["TOTP Plugin"]
---

# Verify backup code

`POST /totp/verify-backup-code`

Verifies a backup code as an alternative to TOTP verification. Completes authentication if the code is valid.

## Request body

- VerifyBackupCodeRequest
  - `code` string, required
  - `trust_device` boolean

## Response `200`

OK

- VerifyBackupCodeResponse
  - `session` Session, required
    - `created_at` string, date-time, required
    - `expires_at` string, date-time, required
    - `id` string, required
    - `ip_address` string, nullable
    - `token` string, required
    - `updated_at` string, date-time, required
    - `user_agent` string, nullable
    - `user_id` string, required
  - `user` User, required
    - `created_at` string, date-time, required
    - `email` string, required
    - `email_verified` boolean, required
    - `id` string, required
    - `image` string, nullable
    - `metadata` object, nullable
    - `name` string, required
    - `updated_at` string, date-time, required

---

[API](https://skmtc.net/authula/apis/authula-api.md) · [All operations](https://skmtc.net/authula/apis/authula-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authula/authula-api/revisions/ee28a7965ce5/schema)