# Verify TOTP verification

**POST /api/experience/verification/totp/verify**

Verifies the provided TOTP code against the new created TOTP secret or the existing TOTP secret. If a verificationId is provided, this API will verify the code against the TOTP secret that is associated with the verification record. Otherwise, a new TOTP verification record will be created and verified against the user's existing TOTP secret.


## Servers
- Logto endpoint address.: https://[tenant_id].logto.app (Logto endpoint address.)



## Parameters



## Body parameters
Content-type: application/json

- **code** (string)
  The TOTP code to be verified.
- **verificationId** (string)
  The verification ID of the newly created TOTP secret. This ID is required to verify a newly created TOTP secret that needs to be bound to the user account. If not provided, the API will create a new TOTP verification record and verify the code against the user's existing TOTP secret.

## Responses
### 200: The TOTP code has been successfully verified.

#### Body Parameters: application/json (object)
- **verificationId** (string)
  The unique verification ID of the TOTP verification record. For newly created TOTP secret verification record, this ID is required to bind the TOTP secret to the user account through `Profile` API.

### 400: Invalid TOTP code.

### 404: Verification record not found.


[Powered by Bump.sh](https://bump.sh)