OFICIAL AWS What's New

Amazon Cognito adds admin API operation to reset user TOTP configurations

What happened
Based on AWS What's New · Aug 26, 2026

Amazon Cognito introduced an admin API to reset users' TOTP MFA configurations, enabling administrators to remove lost device associations and restore access without recreating accounts.

🚩 Report a correction ↗ Open source
Amazon Cognito adds admin API operation to reset user TOTP configurations
AWS What's New — Amazon Web Services
Key points
·
Amazon Cognito now provides a new admin API operation to reset a user's time-based one-time Password (TOTP) multi-factor authentication (MFA) configuration.
·
When users lose access to their TOTP device, administrators can remove the device association, allowing the user to enroll a new device on their next sign-in.
·
This removes the need to recreate accounts to recover locked-out users if they lose access to their TOTP device.
·
Customers can maintain MFA enforcement while providing a recovery path.

Amazon Cognito has added a new admin API operation, AdminDeleteSoftwareToken, to reset a user’s time-based one-time password (TOTP) multi-factor authentication (MFA) configuration. This feature allows administrators to remove a device association when a user loses access to their TOTP authenticator, such as a smartphone app or hardware token.

The update eliminates the need to recreate user accounts solely to recover access in cases where the original TOTP device is unavailable. Administrators can now maintain MFA enforcement policies while providing a straightforward recovery path for affected users.

The new capability is available in all AWS Regions where Amazon Cognito operates, ensuring consistent functionality across global deployments. Organizations can integrate the AdminDeleteSoftwareToken API into existing workflows using AWS CLI, SDKs, or direct API calls.

To implement this feature, users should refer to the Amazon Cognito developer guide for detailed instructions on using the AdminDeleteSoftwareToken API. The change supports operational continuity for businesses relying on Cognito for secure user authentication.

Original source → Deals on Clipraptor.com →