Bulk Invalidate All Remembered Browsers for Multi-Factor Authentication

Last Updated: Sep 10, 2025

Overview

This article goes into more detail on how to bulk invalidate all remembered browsers for multi-factor authentication.

Solution

The POST /api/v2/users/{id}/multifactor/actions/invalidate-remember-browser Management API endpoint can invalidate all remembered browsers across all authentication factors for a user.

However, it is not possible to bulk invalidate the user's remember browser option. This must be performed for each user using the POST /api/v2/users/{id}/multifactor/actions/invalidate-remember-browser endpoint.

This method needs to loop through all user_ids. When making a series of requests for all users, please stay within the rate limits for the Management APIv2.

Related References

Invalidate All Remembered Browsers for Multi-factor Authentication
Rate Limit Policy