> ## Documentation Index
> Fetch the complete documentation index at: https://arklowdocs.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify a backup MFA code

> Verify a backup MFA code for the authenticated user.



## OpenAPI

````yaml https://api.arklow.io/swagger/ui/json post /v1/self/mfa/verify/totp/backup
openapi: 3.1.0
info:
  title: Arklow
  description: Arklow's API
  version: 0.1.0
servers:
  - url: https://api.arklow.io
    description: Production
  - url: http://localhost:3123
    description: Local development
security:
  - apiKey: []
tags:
  - name: actions
  - name: api_keys
  - name: billing
  - name: config
  - name: credentials
  - name: destinations
  - name: invites
  - name: members
  - name: metrics
  - name: notifications
  - name: orgs
  - name: rules
  - name: sources
  - name: users
  - name: ingress
externalDocs:
  url: https://api.arklow.io/swagger/ui
paths:
  /v1/self/mfa/verify/totp/backup:
    post:
      tags:
        - users
      summary: Verify a backup MFA code
      description: Verify a backup MFA code for the authenticated user.
      operationId: post_v1_self_mfa_verify_totp_backup
      requestBody:
        content:
          application/json:
            schema:
              type: object
              required:
                - device_id
                - code
              properties:
                device_id:
                  type: string
                  pattern: ^[0-9]+$
                code:
                  type: string
                  minLength: 6
        required: true
      responses:
        '200':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                required:
                  - data
                  - errors
                properties:
                  data:
                    anyOf:
                      - type: object
                        required:
                          - valid
                          - device_id
                          - verification_type
                          - session_mfa_not_after
                        properties:
                          valid:
                            type: boolean
                          device_id:
                            type: string
                          verification_type:
                            anyOf:
                              - type: string
                                enum:
                                  - totp
                              - type: string
                                enum:
                                  - backup_code
                          session_mfa_not_after:
                            anyOf:
                              - type: string
                                format: date-time
                              - type: 'null'
                      - type: 'null'
                  errors:
                    anyOf:
                      - type: array
                        items:
                          type: object
                          required:
                            - code
                            - message
                          properties:
                            code:
                              type: string
                            message:
                              type: string
                      - type: 'null'
components:
  securitySchemes:
    apiKey:
      type: apiKey
      name: x-arklow-auth
      in: header

````