---
title: "Update a user's MFA factor."
method: PUT
path: "/admin/users/{userId}/factors/{factorId}"
tags: ["admin"]
---

# Update a user's MFA factor.

`PUT /admin/users/{userId}/factors/{factorId}`

## Request body

- object

## Response `200`

User's MFA factor.

- MFAFactorSchema — Represents a MFA factor.
  - `id` string, uuid
  - `status` string — Usually one of: - verified - unverified
  - `friendly_name` string
  - `factor_type` string — Usually one of: - totp - phone - webauthn
  - `webauthn_credential` string
  - `phone` string, phone, nullable
  - `created_at` string, date-time
  - `updated_at` string, date-time
  - `last_challenged_at` string, date-time, nullable

## Other responses

- `401` — HTTP Unauthorized response.
- `403` — HTTP Forbidden response.
- `404` — There is no such user and/or factor.

---

[API](https://skmtc.net/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.net/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/versions/2664b89bee49/schema)