---
title: "Manage multi-factor authentication"
method: POST
path: "/user/mfa"
tags: ["security"]
---

# Manage multi-factor authentication

`POST /user/mfa`

Activate or deactivate multi-factor authentication for the authenticated user

## Request body

- UserMfaRequest — Request to activate or deactivate multi-factor authentication
  - `code` string, required — Verification code from the authenticator app when activating MFA
  - `activeMfaType` 'totp' | '' — Type of MFA to activate. Use empty string to disable MFA.

## Response `200`

MFA status successfully updated

- 'OK'

## Other responses

- `default` — An error occurred while processing the request

---

[API](https://skmtc.net/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.net/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/revisions/a5c0d88b55c4/schema)