---
title: "Verify backup code"
method: POST
path: "/api/experience/verification/backup-code/verify"
tags: ["Experience"]
---

# Verify backup code

`POST /api/experience/verification/backup-code/verify`

Create a new BackupCode verification record and verify the provided backup code against the user's backup codes. The verification record will be marked as verified if the code is correct.

## Request body

- object
  - `code` string, required — The backup code to verify.

## Response `200`

The backup code has been successfully verified.

- object
  - `verificationId` string, required — The unique verification ID of the BackupCode verification record.

## Other responses

- `400` — The provided backup code is invalid.
- `404` — Entity not found. <br/> - `session.identifier_not_found:` The current interaction is not identified yet. All MFA verification records must be associated with a identified user.

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/a163dc77d842/schema)