---
title: "Gets two step verification system metadata."
method: GET
path: "/v1/metadata#twostepverification.roblox.com"
tags: ["Accounts", "Metadata"]
---

# Gets two step verification system metadata.

`GET /v1/metadata#twostepverification.roblox.com`

The metadata endpoint takes in optional request parameters to output additional context
for when the user is unauthenticated but attempting to login with two step verification.

When supplied, all three request parameters must be sent and match up.

## Query parameters

- `userId` integer
- `challengeId` string
- `actionType` 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8

## Response `200`

OK

- RobloxTwoStepVerificationApiMetadataResponse — Two step verification system metadata.
  - `twoStepVerificationEnabled` boolean — Whether or not two step verification is globally enabled.
  - `authenticatorQrCodeSize` string — Authenticator QR code image dimensions.
  - `emailCodeLength` integer — Number of characters in an email-based two step verification code.
  - `authenticatorCodeLength` integer — Number of characters in an authenticator-based two step verification code.
  - `authenticatorHelpSiteAddress` string — Address of the help site provided to users to help them with authenticator.
  - `isPasswordRequiredForEnablingAuthenticator` boolean — Whether or not a password is required for enabling authenticator.
  - `isPasswordRequiredForEnablingEmailTwoStepVerification` boolean — Whether or not a password is required for enabling email 2sv.
  - `isUsingTwoStepWebviewComponent` boolean — Whether or not we're using the new 2sv webview component or the manual pop up
  - `isTwoStepEnabledRequiredForEmailPasswordRequirement` boolean — Whether or not a 2sv method has to be enabled to require password when enabling email two step verification.
  - `isTwoStepEnabledRequiredForAuthenticatorPasswordRequirement` boolean — Whether or not a 2sv method has to be enabled to require password when enabling authenticator.
  - `isSingleMethodEnforcementEnabled` boolean — Whether or not the frontend should enforce single method logic.
  - `isSmsTwoStepVerificationAvailable` boolean — Whether or not sms two step verification is available for the user.
  - `isSecurityKeyTwoStepVerificationAvailable` boolean — Whether or not security key two step verification is available for the user.
  - `isAuthenticatorWithVerifiedPhoneEnabled` boolean — Whether or not someone can enable authenticator with just a verified phone number.
  - `isPasswordRequiredForEnablingSecurityKey` boolean — Whether or not a password is required for enabling Security Key 2SV.
  - `isPasswordRequiredForEnablingSms2SV` boolean — Whether or not a password is required for enabling SMS 2SV.
  - `isPasswordRequiredForChangingRecoveryCodes` boolean — Whether or not a password is required for making updates to recovery codes.
  - `isPasswordRequiredForDisablingAuthenticator` boolean — Whether or not a password is required for disabling authenticator.
  - `isPasswordRequiredForDisablingEmailTwoStepVerification` boolean — Whether or not a password is required for disabling email 2sv.
  - `isPasswordRequiredForDisablingSms2SV` boolean — Whether or not a password is required for disabling SMS 2SV.
  - `isRecoveryCodeGenerationForAuthenticatorSetupEnabled` boolean — Whether recovery code generation is attempted upon completion of authenticator setup.
  - `isSecurityKeyOnAllPlatformsEnabled` boolean — Whether security keys on all platforms is enabled.
  - `receiveWarningsOnDisableTwoStep` boolean — Whether users should receive additional warnings when disabling 2SV.
  - `isAndroidSecurityKeyEnabled` boolean — Whether Android security keys is enabled.
  - `isSettingsTabRedesignEnabled` boolean — Whether the settings tab redesign is enabled.
  - `twoStepCopyTextEnrollmentStatus` integer — The enum representing which experiment group the user is in.
  - `isEppUIEnabled` boolean — Whether the EPP UI is enabled.
  - `isEppRecoveryCodesEnabled` boolean — Whether the EPP recovery codes UI is enabled.
  - `maskedUserEmail` string — The masked email for the authenticated user. Typically used in Email 2SV challenges after the challenge has been verified to match the target user.
  - `isUserU13` boolean — Whether the user is O13.
  - `isDelayedUiEnabled` boolean — Whether the delayed UI is enabled.
  - `is2svRecoveryEnabled` boolean — Whether to expose 2SV recovery through the 2SV challenge modal.

---

[API](https://skmtc.net/roblox/apis/roblox-api.md) · [All operations](https://skmtc.net/roblox/apis/roblox-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/roblox/roblox-api/revisions/80880b69892d/schema)