---
title: "Regenerate recovery codes REST API | HitKeep"
description: "Reference for the HitKeep REST API operation Regenerate recovery codes, including request parameters, responses, and authentication notes."
canonical: "https://hitkeep.com/api/operations/apiusersecurityrecovery-codesregenerate/"
---

# Regenerate recovery codes REST API

POST

/api/user/security/recovery-codes/regenerate

FetchcURL

```
const url = 'http://127.0.0.1:25737/api/user/security/recovery-codes/regenerate';
const options = {method: 'POST', headers: {cookie: 'hk_token=<hk_token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```
curl --request POST \
  --url http://127.0.0.1:25737/api/user/security/recovery-codes/regenerate \
  --cookie hk_token=<hk_token>
```

-

Generates a new one-time set of backup recovery codes for the authenticated user.

## Authorizations

- **[cookieAuth](https://hitkeep.com/api/#cookieauth)**

## Responses

### 200

Recovery codes

application/json

object

**codes**

Array<string>

**remaining**

integer

##### Examplegenerated

```
{
  "codes": [
    "example"
  ],
  "remaining": 1
}
```

### 409

Enable TOTP or register a passkey before generating recovery codes

application/json

object

**message**

string

##### Examplegenerated

```
{
  "message": "example"
}
```

[Previous Delete passkey](https://hitkeep.com/api/operations/apiusersecuritypasskeysid/)[Next Unlink social provider](https://hitkeep.com/api/operations/apiusersecuritysocialprovider/)