---
title: "Validate password"
method: POST
path: "/auth/v1/mfa/password/validate"
---

# Validate password

`POST /auth/v1/mfa/password/validate`

Validate the entered password.

## Request body

- object
  - `deviceId` string, required — Unique ID of the device used to validate the password. It should be the same device used to generate the token.
  - `brand` string, required — Name of the brand or organisation that needs verification.
  - `sessionId` string, required — Unique ID created from `/mfa/token/generate` API.
  - `password` string, required — Password that needs validation.
  - `identifierType` 'MOBILE' | 'EMAIL' | 'USERNAME' | 'EXTERNALID', required — Type of identifier to identify the customer.
  - `identifierValue` string, required — Value of the identifier.

## Response `200`

200

- object
  - `status` object
    - `success` boolean
    - `code` integer
    - `message` string
  - `auth` object
    - `token` string
    - `key` string
  - `identifiers` object
    - `identifierList` unknown
  - `user` object
    - `appRegistered` boolean
    - `sessionId` unknown
    - `role` string
    - `userRegisteredForPassword` boolean

## Other responses

- `400` — 400

---

[API](https://skmtc.net/capillarytech/apis/sample-api.md) · [All operations](https://skmtc.net/capillarytech/apis/sample-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/capillarytech/sample-api/revisions/de241f2ed9b3/schema)