Turn off Multi-Factor Authentication for Signing In

Turn off Multi-Factor Authentication for Signing In

This endpoint deactivates Multi-Factor Authentication for a user's sign-in process. Once disabled, the user will no longer be prompted for a second authentication factor (such as an SMS code, email code, or authenticator app) and will log in with a password only. The action is scoped to the authenticated user identified by the Bearer token.

Endpoint

DELETE /settings/MfaSignIn

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Call this endpoint when a user explicitly requests to turn off MFA for their account sign-in through your application's security or account settings interface. This is appropriate after confirming the user understands that disabling MFA reduces account security. It is not appropriate to call this endpoint programmatically without a deliberate user action, as it downgrades the sign-in security posture of the account.

Request Body

This endpoint does not require a request body. The Bearer token is sufficient to identify and authorize the operation for the authenticated user.

Response

200 OK

Indicates MFA for sign-in has been successfully disabled. The account will now require only a password for authentication.

{}

Error Codes

Common Mistakes

• Calling this endpoint without a valid, unexpired Bearer token will result in a 401 error; ensure the token is refreshed before making the request.
• This action cannot be reversed automatically — if MFA needs to be re-enabled, a separate POST /settings/MfaSignIn call is required.
• Do not call this endpoint on behalf of a user without explicit user consent, as it reduces account security.

Related Endpoints

• POST /settings/MfaSignIn — Enable Multi-Factor Authentication for sign-in
• DELETE /settings/MfaTransaction — Disable Multi-Factor Authentication for transaction authorization
• POST /settings/MfaTransaction — Enable Multi-Factor Authentication for transaction authorization

Example

curl -X DELETE https://api.banking.netevia.dev/settings/MfaSignIn \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json"