---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/messaging/api/brand-2fa-verify#article
headline: A2P 10DLC - Brand 2FA Verification Resource
description: API reference for the Brand 2FA Verification resource. Retrigger a two-factor authentication (2FA) email for Authentication+ on your A2P 10DLC Brand registration.
url: https://www.twilio.com/docs/messaging/api/brand-2fa-verify
inLanguage: en
dateModified: 2026-08-20T18:09:16.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# A2P 10DLC - Brand 2FA Verification Resource

> \[!WARNING]
>
> This API reference supplements the [A2P 10DLC brand registration guide](/docs/messaging/compliance/a2p-10dlc/collect-business-info). Review that guide before you use this API.

The 2FA Verification resource retriggers a two-factor authentication (2FA) email for Authentication+ association with the [BrandRegistration resource](/docs/messaging/api/brand-registration-resource).

The 2FA Verification resource is a subresource of the BrandRegistration resource.

## Base URL

All URLs referenced in the API documentation have the following base:

`https://messaging.twilio.com/v1/a2p/BrandRegistrations`

## Create a 2FA Verification resource

**Resource URL**: `https://messaging.twilio.com/v1/a2p/BrandRegistrations/{BrandSid}/2fa`

To initiate a 2FA Verification for the Brand, make a `POST` request to this resource.

See the following code sample for a complete curl request.

Use your API key SID and API key secret for `TWILIO_API_KEY` and `TWILIO_API_SECRET`. To create an API key, see [Create and manage API keys in the Console](/docs/iam/api-keys/keys-in-console).

```bash
curl -X POST "https://messaging.twilio.com/v1/a2p/BrandRegistrations/BNXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/2fa" \
  -u "$TWILIO_API_KEY:$TWILIO_API_SECRET" \
  -H "Content-Type: application/json"
```

> \[!WARNING]
>
> Don't create a [UsAppToPerson resource](/docs/messaging/api/usapptoperson-resource) until the BrandRegistration resource's `vetting_status` is `FAILED`.
>
> You can check the `vetting_status` through fetching the BrandVetting resource.
>
> Once the BrandVetting status is `FAILED` and the 2FA Verification is initiated, a new email will be sent and this will incur a new Authentication+ fee.