---
title: "MFA disabled"
method: POST
path: "mfa.disabled"
---

# MFA disabled

`POST mfa.disabled` (webhook)

Fired when a user disables multi-factor authentication.

## Payload

- MfaDisabledWebhookPayload — Payload for the mfa.disabled webhook event.
  - `method` 'sms' | 'totp' | 'passkey', required — The MFA method that was disabled.
  - `type` 'mfa.disabled', required — The type of webhook event.
  - `user_id` string, required — The ID of the user who disabled MFA.

## Acknowledgement `200`

Return a 200 status to indicate that the webhook was received successfully.

---

[API](https://skmtc.net/privy-io/apis/privy-api.md) · [All operations](https://skmtc.net/privy-io/apis/privy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/privy-io/privy-api/revisions/bb2eb34156cc/schema)