Skip to content

removePasskey

POST
/api/v1/me/security/passkeys/{id}/remove
curl --request POST \
--url https://example.com/api/v1/me/security/passkeys/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/remove \
--header 'Content-Type: application/json' \
--header 'X-CSRF-Token: example' \
--data '{ "password": "example" }'

Requires the account password in the body.

id
required
string format: uuid
X-CSRF-Token
required
string
Media typeapplication/json
object
password
required

The account password, reverified so a borrowed session cannot weaken sign-in security on its own.

string
Examplegenerated
{
"password": "example"
}

Passkey removed

The password was not correct

Policy requires a remaining factor