Disable user MFA

POST

/api/admin/users/{id}/disable-2fa

curl --request POST \
  --url https://hitkeep.com/api/admin/users/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/disable-2fa \
  --cookie hk_token=<hk_token>

Owner-only recovery action that clears TOTP, passkeys, pending MFA challenges, and remember-me sessions for the target user.

Authorizations

• cookieAuth

Parameters

Path Parameters

id

required

string format: uuid

Responses

200

Disable user MFA response

Media type application/json

object

passkeys_deleted

required

integer

sessions_invalidated

required

integer

status

required

string

totp_disabled

required

boolean

Example ^generated

{
  "passkeys_deleted": 1,
  "sessions_invalidated": 1,
  "status": "example",
  "totp_disabled": true
}

403

Forbidden

Media type application/json

object

message

string

Example ^generated

{
  "message": "example"
}

404

Not found

Media type application/json

object

message

string

Example ^generated

{
  "message": "example"
}