Replaces your recovery codes with 10 new ones.
HTTP
POST /account/mfa/recovery-codesAccess: Session token only. API keys get 403 with insufficient_scope.
The old codes stop working.
Request body #
JSON.
| Field | Type | Required | Description |
|---|---|---|---|
password | string | yes | Your password. |
Response 200 #
JSON
{ "recoveryCodes": ["3fa9c-1b2d4", "9c0e1-77aa3"] }Errors #
| Status | error | When |
|---|---|---|
| 401 | unauthenticated | The token is missing or not valid. |
| 403 | wrong_password | password is not your password. |
| 409 | mfa_not_enabled | Two-factor authentication is off. |
| 429 | rate_limited | Too many requests, see Rate limiting. |
See Errors for the error format.