---
title: "GET recovery code form."
method: GET
path: "/mf-recovery"
---

# GET recovery code form.

`GET /mf-recovery`

If a user has two-factor authentication enabled, they can generate and use a recovery code if they lose or otherwise can't use their second factor device.

## Response `200`

Multi-factor recovery form

- DefaultJsonResponseNoUser
  - `meta` object, required
    - `code` integer, required — Http status code
  - `response` object, required
    - `csrf_token` string — Session CSRF token

---

[API](https://skmtc.net/pallets-eco/apis/flask-security-external-api.md) · [All operations](https://skmtc.net/pallets-eco/apis/flask-security-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pallets-eco/flask-security-external-api/versions/5ee7c28d6e1e/schema)