Skip to main content

Start authenticator-app setup

POST 
/auth/totp/setup

Generates a new secret and returns it plus an otpauth:// URI to render as a QR code client-side. Does not enable TOTP by itself — call POST /auth/totp/confirm with a real code from the scanned app to finish. Calling this again before confirming replaces the pending secret.

Responses​

OK