---
title: "Authenticate with recovery code"
method: POST
path: "/accounts/auth-with-recovery-code"
tags: ["Authentication", "Multi-Factor Authentication"]
---

# Authenticate with recovery code

`POST /accounts/auth-with-recovery-code`

Complete authentication using a recovery code after initial password verification. Recovery codes are one-time use.

## Request body

- AuthWithRecoveryCodeRequest
  - `token` string, required — MFA token received from password authentication
  - `code` string, required — Recovery code

## Response `200`

Authentication successful

- object
  - `data` AuthResponse, required
    - `refresh_token` string — Refresh token
    - `auth_token` string — Authentication token
    - `passkey_enabled` boolean — Whether passkey authentication is enabled
    - `totp_enabled` boolean — Whether TOTP authentication is enabled

## Other responses

- `401` — Invalid recovery code or token

---

[API](https://skmtc.net/quivaworks/apis/quiva-ai-gateway.md) · [All operations](https://skmtc.net/quivaworks/apis/quiva-ai-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/quivaworks/quiva-ai-gateway/revisions/771d118bd4d1/schema)