---
title: "Regenerates the caller's 2FA recovery codes."
method: POST
path: "/api/v1/core/me/mfa/recovery-codes"
tags: ["Core/Me"]
---

# Regenerates the caller's 2FA recovery codes.

`POST /api/v1/core/me/mfa/recovery-codes`

Mints a fresh batch of 10 recovery codes and invalidates the previous
batch. Use when the user has burnt through their codes or lost them.

## Response `200`

New recovery codes returned

- ApiResponseMfaRecoveryCodesResponse — Standard API response envelope. All API endpoints return this structure. `data`: the payload (object or collection). `pagination`: present only for paginated collections.
  - `data` MfaRecoveryCodesResponse — Recovery codes returned after a successful `POST /me/mfa/enable` or a `POST /me/mfa/recovery-codes` regeneration. The user must store them — the platform doesn't keep a plaintext copy past this response.
    - `codes` string[], nullable — 10 single-use codes formatted as 11-char strings.
  - `pagination` PaginationMeta — Pagination metadata included in paginated API responses.
    - `page` integer
    - `pageSize` integer
    - `totalCount` integer
    - `totalPages` integer

## Other responses

- `400` — 2FA is not enabled on the account
- `401` — Not authenticated

---

[API](https://skmtc.net/neotimo/apis/neotimo-api.md) · [All operations](https://skmtc.net/neotimo/apis/neotimo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/neotimo/neotimo-api/revisions/2ecf51b1543e/schema)