---
title: "Log into the account"
method: POST
path: "/v3/accounts/login"
tags: ["Authentication"]
---

# Log into the account

`POST /v3/accounts/login`

Returns an access token and the refresh token.

## Headers

- `origin` string
- `user-Agent` string

## Request body

- LoginRequestModel
  - `accountId` string, nullable, required — Unique identifier of the account.
  - `accountAlias` string, nullable — Unique account alias.
  - `email` string, email, required — Email address of the user.
  - `password` string, required — Password of the user.
  - `twoFactorCode` string, nullable — Two factor code generated by Authenticator app.
  - `twoFactorRecoveryCode` string, nullable — Two factor recovery code.
  - `rememberMe` boolean, required — Remember me. When true, the refresh token is valid for 7 days instead of 1 day.

## Response `200`

OK

- AccessTokenDto
  - `accessToken` string, required
  - `refreshToken` string, required

## Other responses

- `400` — Bad Request
- `409` — Conflict
- `429` — Too Many Requests
- `500` — Server Error

---

[API](https://skmtc.net/cryptlex/apis/cryptlex-web-api.md) · [All operations](https://skmtc.net/cryptlex/apis/cryptlex-web-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cryptlex/cryptlex-web-api/revisions/ec1259c12475/schema)