> For the complete documentation index, see [llms.txt](https://docs.flashback.tech/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.flashback.tech/support-reference/platform-api-reference/mfa-multi-factor-authentication/post__mfa_reset.md).

# post\_\_mfa\_reset

`POST /mfa/reset`

*Reset MFA Configuration*

Reset the user's multi-factor authentication configuration. This endpoint allows users to reset their MFA setup when they lose access to their MFA methods. Organization owners and administrators can also reset MFA settings for other users in their organization.

#### Request Body

| Name        | Type   | Required | Description                                                                                                                    |
| ----------- | ------ | -------- | ------------------------------------------------------------------------------------------------------------------------------ |
| resetUserId | string | false    | Optional user ID to reset MFA for. If not provided, resets the authenticated user's MFA. Requires OWNER or ADMINISTRATOR role. |

#### TypeScript Client Library

```typescript
// Note: This endpoint doesn't have a direct client method in the provided TypeScript client
// You would need to use the generic makeRequest method:
// For self-reset:
// this.makeRequest<any>('mfa/reset', 'POST', null);
// For admin reset:
// this.makeRequest<any>('mfa/reset', 'POST', { resetUserId: 'user-id' });
```

#### Code Samples

{% tabs %}
{% tab title="Shell" %}

```shell
# Self-reset (reset your own MFA)
curl -X POST https://backend.flashback.tech/mfa/reset \
  -H 'Accept: application/json' \
  -H 'Authorization: Bearer {access-token}'

# Admin reset (reset another user's MFA - requires OWNER or ADMINISTRATOR role)
curl -X POST https://backend.flashback.tech/mfa/reset \
  -H 'Accept: application/json' \
  -H 'Authorization: Bearer {access-token}' \
  -H 'Content-Type: application/json' \
  -d '{"resetUserId": "user-id-to-reset"}'
```

{% endtab %}

{% tab title="HTTP" %}

```http
# Self-reset
POST https://backend.flashback.tech/mfa/reset HTTP/1.1
Host: localhost:3000
Accept: application/json
Authorization: Bearer {access-token}

# Admin reset
POST https://backend.flashback.tech/mfa/reset HTTP/1.1
Host: localhost:3000
Accept: application/json
Authorization: Bearer {access-token}
Content-Type: application/json

{"resetUserId": "user-id-to-reset"}
```

{% endtab %}

{% tab title="JavaScript" %}

```javascript
// Self-reset
const headers = {
  'Accept':'application/json',
  'Authorization':'Bearer {access-token}'
};

fetch('https://backend.flashback.tech/mfa/reset',
{
  method: 'POST',
  headers: headers
})
.then(function(res) {
    return res.json();
}).then(function(body) {
    console.log(body);
});

// Admin reset
const adminHeaders = {
  'Accept':'application/json',
  'Authorization':'Bearer {access-token}',
  'Content-Type':'application/json'
};

const body = JSON.stringify({
  resetUserId: 'user-id-to-reset'
});

fetch('https://backend.flashback.tech/mfa/reset',
{
  method: 'POST',
  headers: adminHeaders,
  body: body
})
.then(function(res) {
    return res.json();
}).then(function(body) {
    console.log(body);
});
```

{% endtab %}

{% tab title="Ruby" %}

```ruby
require 'rest-client'
require 'json'

# Self-reset
headers = {
  'Accept' => 'application/json',
  'Authorization' => 'Bearer {access-token}'
}

result = RestClient.post 'https://backend.flashback.tech/mfa/reset',
  params: {
  }, headers: headers

p JSON.parse(result)

# Admin reset
admin_headers = {
  'Accept' => 'application/json',
  'Authorization' => 'Bearer {access-token}',
  'Content-Type' => 'application/json'
}

body = {
  resetUserId: 'user-id-to-reset'
}.to_json

result = RestClient.post 'https://backend.flashback.tech/mfa/reset',
  body, headers: admin_headers

p JSON.parse(result)
```

{% endtab %}

{% tab title="Python" %}

```python
import requests
import json

# Self-reset
headers = {
  'Accept': 'application/json',
  'Authorization': 'Bearer {access-token}'
}

r = requests.post('https://backend.flashback.tech/mfa/reset', headers = headers)
print(r.json())

# Admin reset
admin_headers = {
  'Accept': 'application/json',
  'Authorization': 'Bearer {access-token}',
  'Content-Type': 'application/json'
}

data = {
  'resetUserId': 'user-id-to-reset'
}

r = requests.post('https://backend.flashback.tech/mfa/reset',
                 headers = admin_headers,
                 data = json.dumps(data))
print(r.json())
```

{% endtab %}

{% tab title="PHP" %}

```php
<?php

require 'vendor/autoload.php';

// Self-reset
$headers = array(
    'Accept' => 'application/json',
    'Authorization' => 'Bearer {access-token}',
);

$client = new \GuzzleHttp\Client();

try {
    $response = $client->request('POST','https://backend.flashback.tech/mfa/reset', array(
        'headers' => $headers,
       )
    );
    print_r($response->getBody()->getContents());
 }
 catch (\GuzzleHttp\Exception\BadResponseException $e) {
    // handle exception or api errors.
    print_r($e->getMessage());
 }

// Admin reset
$admin_headers = array(
    'Accept' => 'application/json',
    'Authorization' => 'Bearer {access-token}',
    'Content-Type' => 'application/json',
);

$body = json_encode(array(
    'resetUserId' => 'user-id-to-reset'
));

try {
    $response = $client->request('POST','https://backend.flashback.tech/mfa/reset', array(
        'headers' => $admin_headers,
        'body' => $body
       )
    );
    print_r($response->getBody()->getContents());
 }
 catch (\GuzzleHttp\Exception\BadResponseException $e) {
    // handle exception or api errors.
    print_r($e->getMessage());
 }

 // ...
```

{% endtab %}

{% tab title="Java" %}

```java
// Self-reset
URL obj = new URL("https://backend.flashback.tech/mfa/reset");
HttpURLConnection con = (HttpURLConnection) obj.openConnection();
con.setRequestMethod("POST");
con.setRequestProperty("Accept", "application/json");
con.setRequestProperty("Authorization", "Bearer {access-token}");
int responseCode = con.getResponseCode();
BufferedReader in = new BufferedReader(
    new InputStreamReader(con.getInputStream()));
String inputLine;
StringBuffer response = new StringBuffer();
while ((inputLine = in.readLine()) != null) {
    response.append(inputLine);
}
in.close();
System.out.println(response.toString());

// Admin reset
URL adminObj = new URL("https://backend.flashback.tech/mfa/reset");
HttpURLConnection adminCon = (HttpURLConnection) adminObj.openConnection();
adminCon.setRequestMethod("POST");
adminCon.setRequestProperty("Accept", "application/json");
adminCon.setRequestProperty("Authorization", "Bearer {access-token}");
adminCon.setRequestProperty("Content-Type", "application/json");
adminCon.setDoOutput(true);

String jsonInputString = "{\"resetUserId\": \"user-id-to-reset\"}";
try(OutputStream os = adminCon.getOutputStream()) {
    byte[] input = jsonInputString.getBytes("utf-8");
    os.write(input, 0, input.length);
}

int adminResponseCode = adminCon.getResponseCode();
BufferedReader adminIn = new BufferedReader(
    new InputStreamReader(adminCon.getInputStream()));
String adminInputLine;
StringBuffer adminResponse = new StringBuffer();
while ((adminInputLine = adminIn.readLine()) != null) {
    adminResponse.append(adminInputLine);
}
adminIn.close();
System.out.println(adminResponse.toString());
```

{% endtab %}

{% tab title="Go" %}

```go
package main

import (
       "bytes"
       "net/http"
       "encoding/json"
)

func main() {
    // Self-reset
    headers := map[string][]string{
        "Accept": []string{"application/json"},
        "Authorization": []string{"Bearer {access-token}"},
    }

    data := bytes.NewBuffer([]byte{})
    req, err := http.NewRequest("POST", "https://backend.flashback.tech/mfa/reset", data)
    req.Header = headers

    client := &http.Client{}
    resp, err := client.Do(req)
    // ...

    // Admin reset
    adminHeaders := map[string][]string{
        "Accept": []string{"application/json"},
        "Authorization": []string{"Bearer {access-token}"},
        "Content-Type": []string{"application/json"},
    }

    requestBody := map[string]string{
        "resetUserId": "user-id-to-reset",
    }
    jsonData, _ := json.Marshal(requestBody)

    adminData := bytes.NewBuffer(jsonData)
    adminReq, err := http.NewRequest("POST", "https://backend.flashback.tech/mfa/reset", adminData)
    adminReq.Header = adminHeaders

    adminResp, err := client.Do(adminReq)
    // ...
}
```

{% endtab %}
{% endtabs %}

> Example responses

> 200 Response

```json
{
  "success": true,
  "message": "MFA reset successfully"
}
```

> 403 Response

```json
{
  "success": false,
  "error": "Insufficient permissions. OWNER or ADMINISTRATOR role required to reset another user's MFA."
}
```

> 404 Response

```json
{
  "success": false,
  "error": "User not found"
}
```

> 500 Response

```json
{
  "success": false,
  "error": "Failed to reset MFA"
}
```

#### Responses <a href="#post__mfa_reset-responses" id="post__mfa_reset-responses"></a>

| Status | Meaning                                                                    | Description                                          | Schema |
| ------ | -------------------------------------------------------------------------- | ---------------------------------------------------- | ------ |
| 200    | [OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)                    | MFA reset completed successfully                     | Inline |
| 403    | [Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)             | Insufficient permissions to reset another user's MFA | Inline |
| 404    | [Not Found](https://tools.ietf.org/html/rfc7231#section-6.5.4)             | User not found                                       | Inline |
| 500    | [Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1) | Internal server error                                | Inline |

#### Response Schema <a href="#post__mfa_reset-responseschema" id="post__mfa_reset-responseschema"></a>

Status Code **200**

| Name      | Type    | Required | Restrictions | Description                             |
| --------- | ------- | -------- | ------------ | --------------------------------------- |
| » success | boolean | false    | none         | Indicates if the request was successful |
| » message | string  | false    | none         | Success message confirming the reset    |

Status Code **403**

| Name      | Type    | Required | Restrictions | Description                                   |
| --------- | ------- | -------- | ------------ | --------------------------------------------- |
| » success | boolean | false    | none         | Indicates if the request was successful       |
| » error   | string  | false    | none         | Error message describing the permission issue |

Status Code **404**

| Name      | Type    | Required | Restrictions | Description                                 |
| --------- | ------- | -------- | ------------ | ------------------------------------------- |
| » success | boolean | false    | none         | Indicates if the request was successful     |
| » error   | string  | false    | none         | Error message describing the user not found |

Status Code **500**

| Name      | Type    | Required | Restrictions | Description                             |
| --------- | ------- | -------- | ------------ | --------------------------------------- |
| » success | boolean | false    | none         | Indicates if the request was successful |
| » error   | string  | false    | none         | Error message describing the issue      |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.flashback.tech/support-reference/platform-api-reference/mfa-multi-factor-authentication/post__mfa_reset.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.