# Stytch Docs: API & SDK reference Consumer API Mobile SDKs ## Mobile SDKs ### React Native SDK - [Stytch React Native SDK Overview](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/overview.md): Get started with the Stytch React Native SDK for building secure authentication flows - [Installation](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/installation.md): How to install and set up the Stytch React Native SDK in your application. - [Changelog](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/changelog.md): Version history and updates for the Stytch React Native SDK #### Pre-built UI - [Stytch Login](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/prebuilt-ui/stytch-login.md): Implement the Stytch Login component using the Stytch React Native SDK - [Callbacks](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/prebuilt-ui/callbacks.md): Handle authentication callbacks using the Stytch React Native SDK #### Hooks - [useStytchUser Hook](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/hooks/use-stytch-user.md): Get the current User using the Stytch React Native SDK - [useStytchSession](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/hooks/use-stytch-session.md): Access the current session state using the Stytch React Native SDK - [useStytchIsAuthorized Hook](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/hooks/use-stytch-is-authorized.md): Check if the current User is authorized for a resource using the Stytch React Native SDK - [useStytch](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/hooks/use-stytch.md): Access the Stytch client instance using the Stytch React Native SDK #### Methods ##### Users - [Get User](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/users/get-user.md): Get User using the Stytch React Native SDK - [Get User Sync](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/users/get-user-sync.md): Get the currently logged-in User from local storage using the Stytch React Native SDK - [Update User](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/users/update-user.md): Update User using the Stytch React Native SDK - [Delete Authentication Factors](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/users/delete-authentication-factors.md): Delete Authentication Factors using the Stytch React Native SDK ##### Email Magic Links - [Send Email Magic Link](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/email-magic-links/send.md): Send email magic links using the Stytch React Native SDK - [Login or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/email-magic-links/login-or-create.md): Login or create user with email magic links using the Stytch React Native SDK - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/email-magic-links/authenticate.md): Authenticate using the Stytch React Native SDK ##### OAuth - [Start OAuth Flow](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/oauth/start.md): Start OAuth authentication flow using the Stytch React Native SDK - [Attach](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/oauth/attach.md): Pre-associate an OAuth flow with an existing Stytch User - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/oauth/authenticate.md): Authenticate OAuth using the Stytch React Native SDK ##### Passwords - [Create Password](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/passwords/create.md): Create a password using the Stytch React Native SDK - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/passwords/authenticate.md): Authenticate with password using the Stytch React Native SDK - [Reset by Email Start](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/passwords/reset-by-email-start.md): Reset by Email Start using the Stytch React Native SDK - [Reset by Email](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/passwords/reset-by-email.md): Reset by Email using the Stytch React Native SDK - [Password Strength Check](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/passwords/strength-check.md): Password Strength Check using the Stytch React Native SDK ##### One-Time Passcodes (OTPs) - [Login or Create via SMS](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/login-or-create-via-sms.md): Login or Create via SMS using the Stytch React Native SDK - [Send via SMS](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/send-via-sms.md): Send via SMS using the Stytch React Native SDK - [Login or Create via Email](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/login-or-create-via-email.md): Login or Create via Email using the Stytch React Native SDK - [Send via Email](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/send-via-email.md): Send via Email using the Stytch React Native SDK - [Login or Create via WhatsApp](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/login-or-create-via-whatsapp.md): Login or Create via WhatsApp using the Stytch React Native SDK - [Send via WhatsApp](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/send-via-whatsapp.md): Send via WhatsApp using the Stytch React Native SDK - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/otps/authenticate.md): Authenticate using the Stytch React Native SDK ##### Time-Based One-Time Passcodes (TOTPs) - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/totps/create.md): Create a TOTP instance using the Stytch React Native SDK - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/totps/authenticate.md): Authenticate using the Stytch React Native SDK - [Get Recovery Codes](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/totps/get-recovery-codes.md): Get Recovery Codes using the Stytch React Native SDK - [Recover](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/totps/recover.md): Recover using the Stytch React Native SDK ##### Session Management - [Get Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/sessions/get-session-sync.md): Retrieve session details using the Stytch React Native SDK - [On Change Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/sessions/on-change-session.md): Listen for changes to the current Session using the Stytch React Native SDK - [Authenticate Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/sessions/authenticate-session.md): Authenticate Session using the Stytch React Native SDK - [Revoke Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/sessions/revoke-session.md): Revoke Session using the Stytch React Native SDK - [Update Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/sessions/update-session.md): Update Session using the Stytch React Native SDK - [Get Tokens](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/sessions/get-tokens.md): Get Tokens using the Stytch React Native SDK ##### Passkeys & WebAuthn - [Register WebAuthn](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/webauthn/register.md): Register WebAuthn using the Stytch React Native SDK - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/webauthn/authenticate.md): Authenticate using the Stytch React Native SDK - [Update WebAuthn](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/webauthn/update.md): Update WebAuthn using the Stytch React Native SDK ##### Biometrics - [Biometrics](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/overview.md): Biometric authentication enables your users to leverage their devices' built-in biometric authenticators such as FaceID and TouchID for quick and seamless login experiences. - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/register.md): Add a biometric registration for the current user using the Stytch React Native SDK - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/authenticate.md): Authenticate using biometrics with the Stytch React Native SDK - [Keystore Available](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/keystore-available.md): Check if the Keystore is available on the device using the Stytch React Native SDK - [Registration Available](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/registration-available.md): Check if there is an existing biometric registration on device using the Stytch React Native SDK - [Remove Registration](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/remove-registration.md): Clear the existing biometric registration stored on device using the Stytch React Native SDK - [Get Sensor](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/get-sensor.md): Check if biometric sensors are available on the device using the Stytch React Native SDK - [Errors](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/biometrics/errors.md): Biometric authentication error codes and descriptions for the Stytch React Native SDK ##### Impersonation - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/impersonation/authenticate.md): Authenticate an Impersonation Token using the Stytch React Native SDK ##### RBAC - [Is Authorized](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/rbac/is-authorized.md): Is Authorized using the Stytch React Native SDK - [Is Authorized Sync](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/rbac/is-authorized-sync.md): Check if a user has RBAC authorization for specific resources using the Stytch React Native SDK - [Permissions](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/rbac/permissions.md): Get user RBAC permissions using the Stytch React Native SDK ##### Device Fingerprinting - [Get Telemetry ID](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/methods/device-fingerprinting/get-telemetry-id.md): Get the Device Fingerprinting telemetry ID for the device using the Stytch React Native SDK #### More Resources - [User Privacy Measures](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/resources/user-privacy-measures.md): Learn about privacy features and best practices in the Stytch SDK - [Multi-Factor Authentication](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/resources/multi-factor-authentication.md): Built-in frontend MFA protections - [CAPTCHA](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/resources/captcha.md): Protect your application from bots and automated attacks with CAPTCHA - [Deep Linking](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/resources/deep-linking.md): Enable deeplinks in your React-Native project for Expo managed or bare (or vanilla) workflows. - [Android Keystore Considerations](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native-legacy/resources/android-keystore-considerations.md): Important considerations for using the Stytch SDK with Android Keystore ### React Native SDK (Beta) - [Stytch React Native SDK (Beta) Overview](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/overview.md): Get started with the Stytch React Native SDK for building secure authentication flows - [Installation](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/installation.md): How to install and set up the Stytch React Native SDK in your application. - [Changelog](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/changelog.md): Version history and updates for the Stytch React Native SDK - [Quickstart](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/quickstart.md): How to quickly get up and running with the Stytch React Native SDK - [Upgrade Guide](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/upgrade-guide.md): How to upgrade between major versions of the SDK #### Hooks - [useStytchUser Hook](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/hooks/use-stytch-user.md): Get the current User using the Stytch React Native SDK - [useStytchSession](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/hooks/use-stytch-session.md): Access the current session state using the Stytch React Native SDK - [useStytch](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/hooks/use-stytch.md): Access the Stytch client instance using the Stytch React Native SDK #### Methods ##### OTPs - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/authenticate.md): Authenticates a one-time passcode entered by the user, establishing a session. Calls the `POST /sdk/v1/otps/authenticate` endpoint. ###### Sms - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/sms/login-or-create.md): Sends a one-time passcode via SMS to the provided phone number, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/sms/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/sms/send.md): Sends a one-time passcode via SMS to an existing user's phone number. Routes to `POST /sdk/v1/otps/sms/send/primary` if no session is active, or `POST /sdk/v1/otps/sms/send/secondary` if a session exists (to add an additional auth factor). ###### Email - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/email/login-or-create.md): Sends a one-time passcode via email to the provided address, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/email/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/email/send.md): Sends a one-time passcode via email to an existing user's email address. Routes to `POST /sdk/v1/otps/email/send/primary` if no session is active, or `POST /sdk/v1/otps/email/send/secondary` if a session exists (to add an additional auth factor). ###### Whatsapp - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/whatsapp/login-or-create.md): Sends a one-time passcode via WhatsApp to the provided phone number, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/whatsapp/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/otps/whatsapp/send.md): Sends a one-time passcode via WhatsApp to an existing user's phone number. Routes to `POST /sdk/v1/otps/whatsapp/send/primary` if no session is active, or `POST /sdk/v1/otps/whatsapp/send/secondary` if a session exists (to add an additional auth factor). ##### Sessions - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/sessions/authenticate.md): Validates the current session token against the Stytch backend and optionally extends the session. Calls the `POST /sdk/v1/sessions/authenticate` endpoint. - [Revoke](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/sessions/revoke.md): Revokes the current session, signing the user out on the backend and clearing local session state. Calls the `POST /sdk/v1/sessions/revoke` endpoint. - [Attest](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/sessions/attest.md): Attests the current session using a Stytch Trusted Auth Token. Calls the `POST /sdk/v1/sessions/attest` endpoint. ##### Crypto Wallets - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/crypto-wallets/authenticate.md): Authenticates a crypto wallet by signing a server-issued challenge with the wallet's private key. Performs a two-step flow: calls `POST /sdk/v1/crypto_wallets/authenticate/start/primary` (no session) or `POST /sdk/v1/crypto_wallets/authenticate/start/secondary` (with session) to get a challenge stri… ##### Email Magic Links - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/email-magic-links/authenticate.md): Authenticates a magic link token received via deeplink, establishing a session for the user. Calls the `POST /sdk/v1/magic_links/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [EmailMagicLinksClient.loginOrCreate] or [EmailMagicLinksClient.send] call. ###### Email - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/email-magic-links/email/login-or-create.md): Sends a magic link email to the provided address, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/magic_links/email/login_or_create` endpoint. Generates and stores a PKCE code pair for use in the subsequent [MagicLinksClient.authenticate] call. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/email-magic-links/email/send.md): Sends a magic link email to an existing user's email address. Routes to `POST /sdk/v1/magic_links/email/send/primary` if no session is active, or `POST /sdk/v1/magic_links/email/send/secondary` if a session exists (to add an additional auth factor). Generates and stores a PKCE code pair for use in t… ##### TOTPs - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/totps/create.md): Creates a new TOTP instance for the current user and returns the secret, QR code URL, and recovery codes. Calls the `POST /sdk/v1/totps` endpoint. The user should scan the QR code with their authenticator app, then call [authenticate] to verify setup. - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/totps/authenticate.md): Authenticates a time-based one-time passcode from the user's authenticator app. Calls the `POST /sdk/v1/totps/authenticate` endpoint. - [Recover](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/totps/recover.md): Authenticates the user with a TOTP recovery code instead of a time-based code. Calls the `POST /sdk/v1/totps/recover` endpoint. Each recovery code can only be used once. - [Recovery Codes](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/totps/recovery-codes.md): Retrieves the recovery codes for the current user's TOTP instance. Calls the `POST /sdk/v1/totps/recovery_codes` endpoint. Requires an active session. ##### Passwords - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/authenticate.md): Authenticates a user with their email address and password, establishing a session. Calls the `POST /sdk/v1/passwords/authenticate` endpoint. - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/create.md): Creates a new user with an email address and password, and establishes a session. Calls the `POST /sdk/v1/passwords` endpoint. - [Reset By Email Start](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/reset-by-email-start.md): Initiates an email-based password reset by sending a reset link to the user's email address. Calls the `POST /sdk/v1/passwords/email/reset/start` endpoint. Generates and stores a PKCE code pair for use in the subsequent [resetByEmail] call. - [Reset By Email](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/reset-by-email.md): Completes the email password reset flow by setting a new password using the token from the reset link. Calls the `POST /sdk/v1/passwords/email/reset` endpoint. Retrieves the PKCE code verifier stored during the corresponding [resetByEmailStart] call. - [Reset By Existing Password](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/reset-by-existing-password.md): Resets a user's password by verifying their existing password, then setting a new one. Calls the `POST /sdk/v1/passwords/existing_password/reset` endpoint. - [Reset By Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/reset-by-session.md): Resets a user's password using their active session for verification (no existing password required). Calls the `POST /sdk/v1/passwords/session/reset` endpoint. Requires an active session. - [Strength Check](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/passwords/strength-check.md): Checks the strength of a password and returns a score with actionable feedback. Calls the `POST /sdk/v1/passwords/strength_check` endpoint. Does not create a session. ##### Users - [Get User](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/users/get-user.md): Fetches the current user's full profile from the Stytch backend. Calls the `GET /sdk/v1/users/me` endpoint. Requires an active session. - [Delete Factor](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/users/delete-factor.md): Deletes an authentication factor from the current user's account. The endpoint called depends on the type of the [AuthenticationFactor] passed: - [AuthenticationFactor.TOTP] → `DELETE /sdk/v1/users/totps/{totp_id}` - [AuthenticationFactor.Email] → `DELETE /sdk/v1/users/emails/{email_id}` - [Authenti… - [Update](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/users/update.md): Updates the current user's profile. Calls the `PUT /sdk/v1/users/me` endpoint. Requires an active session. ##### Passkeys & WebAuthn - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/webauthn/register.md): Registers a new passkey for the current user. Performs a two-step flow: calls `POST /sdk/v1/webauthn/register/start` to get creation options, invokes the platform credential API to create the passkey, then calls `POST /sdk/v1/webauthn/register` to complete registration. Requires an active session. - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/webauthn/authenticate.md): Authenticates the user with an existing registered passkey. Performs a two-step flow: calls `POST /sdk/v1/webauthn/authenticate/start/primary` (no session) or `POST /sdk/v1/webauthn/authenticate/start/secondary` (with session) to get assertion options, invokes the platform credential API, then calls… - [Update](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/webauthn/update.md): Updates metadata for an existing passkey registration (e.g. sets a user-friendly display name). Calls the `PUT /sdk/v1/webauthn/update/{webauthn_registration_id}` endpoint. ##### Biometrics - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/biometrics/register.md): Registers the device's biometric credential (fingerprint, face, etc.) for the current user. Performs a two-step flow: calls `POST /sdk/v1/biometrics/register/start` to get a challenge, prompts the user for biometric authentication, then calls `POST /sdk/v1/biometrics/register` to complete registrati… - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/biometrics/authenticate.md): Authenticates the user using a previously registered biometric credential. Performs a two-step flow: calls `POST /sdk/v1/biometrics/authenticate/start` to get a challenge, prompts the user for biometric authentication, then calls `POST /sdk/v1/biometrics/authenticate` to complete. - [Remove Registration](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/biometrics/remove-registration.md): Removes the locally stored biometric registration keypair from this device. This is a local-only operation — it does not make a network call and does not remove the registration from the Stytch backend. Requires an active session. - [Get Availability](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/biometrics/get-availability.md): Returns the biometric availability status for the current device and user. This is a local-only operation — it does not make a network call. ##### OAuth - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/oauth/authenticate.md): Authenticates an OAuth token received from a deeplink after the browser-based OAuth flow completes. Calls the `POST /sdk/v1/oauth/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [OAuthType.start] call. - [Authenticate Google Id Token](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/oauth/authenticate-google-id-token.md): Authenticates a Google ID token obtained via native Android Google Sign-In. Calls the `POST /sdk/v1/oauth/google/id_token/authenticate` endpoint. - [Authenticate Apple Id Token](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/oauth/authenticate-apple-id-token.md): Authenticates an Apple ID token obtained via native iOS Sign In with Apple. Calls the `POST /sdk/v1/oauth/apple/id_token/authenticate` endpoint. - [Attach](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/oauth/attach.md): Creates an OAuth attach token that can be used to link an OAuth provider to an existing authenticated session. Calls the `POST /sdk/v1/oauth/attach` endpoint. Pass the returned attach token as `oauthAttachToken` in a subsequent [OAuthType.start] call. ##### Device Fingerprinting - [Get Telemetry Id](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/methods/device-fingerprinting/get-telemetry-id.md): Returns a DFP telemetry ID generated by the Stytch device fingerprinting SDK. This is a local operation — it does not make a network call to the Stytch API. Pass the returned ID to your backend, which can use it in server-side Stytch DFP lookup calls. #### More Resources - [User Privacy Measures](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/resources/user-privacy-measures.md): Learn about privacy features and best practices in the Stytch SDK - [Multi-Factor Authentication](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/resources/multi-factor-authentication.md): Built-in frontend MFA protections - [CAPTCHA](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/resources/captcha.md): Protect your application from bots and automated attacks with CAPTCHA - [Deep Linking](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/resources/deep-linking.md): Enable deeplinks in your React-Native project for Expo managed or bare (or vanilla) workflows. - [Android Keystore Considerations](https://stytch.com/docs/api-reference/consumer/mobile-sdks/react-native/resources/android-keystore-considerations.md): Important considerations for using the Stytch SDK with Android Keystore ### iOS SDK - [Stytch iOS Consumer SDK Overview](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/overview.md): Get started with the Stytch iOS Consumer SDK for building secure authentication flows - [Installation](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/installation.md): How to install and set up the Stytch Consumer SDK in your iOS application. - [Changelog](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/changelog.md): Version history and updates for the Stytch iOS SDK - [Quickstart](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/quickstart.md): How to quickly get up and running with the Stytch iOS SDK - [Upgrade Guide](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/upgrade-guide.md): How to upgrade between major versions of the SDK #### Methods ##### OTPs - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/authenticate.md): Authenticates a one-time passcode entered by the user, establishing a session. Calls the `POST /sdk/v1/otps/authenticate` endpoint. ###### Sms - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/sms/login-or-create.md): Sends a one-time passcode via SMS to the provided phone number, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/sms/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/sms/send.md): Sends a one-time passcode via SMS to an existing user's phone number. Routes to `POST /sdk/v1/otps/sms/send/primary` if no session is active, or `POST /sdk/v1/otps/sms/send/secondary` if a session exists (to add an additional auth factor). ###### Email - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/email/login-or-create.md): Sends a one-time passcode via email to the provided address, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/email/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/email/send.md): Sends a one-time passcode via email to an existing user's email address. Routes to `POST /sdk/v1/otps/email/send/primary` if no session is active, or `POST /sdk/v1/otps/email/send/secondary` if a session exists (to add an additional auth factor). ###### Whatsapp - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/whatsapp/login-or-create.md): Sends a one-time passcode via WhatsApp to the provided phone number, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/whatsapp/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/otps/whatsapp/send.md): Sends a one-time passcode via WhatsApp to an existing user's phone number. Routes to `POST /sdk/v1/otps/whatsapp/send/primary` if no session is active, or `POST /sdk/v1/otps/whatsapp/send/secondary` if a session exists (to add an additional auth factor). ##### Sessions - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/sessions/authenticate.md): Validates the current session token against the Stytch backend and optionally extends the session. Calls the `POST /sdk/v1/sessions/authenticate` endpoint. - [Revoke](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/sessions/revoke.md): Revokes the current session, signing the user out on the backend and clearing local session state. Calls the `POST /sdk/v1/sessions/revoke` endpoint. - [Attest](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/sessions/attest.md): Attests the current session using a Stytch Trusted Auth Token. Calls the `POST /sdk/v1/sessions/attest` endpoint. ##### Crypto Wallets - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/crypto-wallets/authenticate.md): Authenticates a crypto wallet by signing a server-issued challenge with the wallet's private key. Performs a two-step flow: calls `POST /sdk/v1/crypto_wallets/authenticate/start/primary` (no session) or `POST /sdk/v1/crypto_wallets/authenticate/start/secondary` (with session) to get a challenge stri… ##### Email Magic Links - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/email-magic-links/authenticate.md): Authenticates a magic link token received via deeplink, establishing a session for the user. Calls the `POST /sdk/v1/magic_links/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [EmailMagicLinksClient.loginOrCreate] or [EmailMagicLinksClient.send] call. ###### Email - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/email-magic-links/email/login-or-create.md): Sends a magic link email to the provided address, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/magic_links/email/login_or_create` endpoint. Generates and stores a PKCE code pair for use in the subsequent [MagicLinksClient.authenticate] call. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/email-magic-links/email/send.md): Sends a magic link email to an existing user's email address. Routes to `POST /sdk/v1/magic_links/email/send/primary` if no session is active, or `POST /sdk/v1/magic_links/email/send/secondary` if a session exists (to add an additional auth factor). Generates and stores a PKCE code pair for use in t… ##### TOTPs - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/totps/create.md): Creates a new TOTP instance for the current user and returns the secret, QR code URL, and recovery codes. Calls the `POST /sdk/v1/totps` endpoint. The user should scan the QR code with their authenticator app, then call [authenticate] to verify setup. - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/totps/authenticate.md): Authenticates a time-based one-time passcode from the user's authenticator app. Calls the `POST /sdk/v1/totps/authenticate` endpoint. - [Recover](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/totps/recover.md): Authenticates the user with a TOTP recovery code instead of a time-based code. Calls the `POST /sdk/v1/totps/recover` endpoint. Each recovery code can only be used once. - [Recovery Codes](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/totps/recovery-codes.md): Retrieves the recovery codes for the current user's TOTP instance. Calls the `POST /sdk/v1/totps/recovery_codes` endpoint. Requires an active session. ##### Passwords - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/authenticate.md): Authenticates a user with their email address and password, establishing a session. Calls the `POST /sdk/v1/passwords/authenticate` endpoint. - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/create.md): Creates a new user with an email address and password, and establishes a session. Calls the `POST /sdk/v1/passwords` endpoint. - [Reset By Email Start](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/reset-by-email-start.md): Initiates an email-based password reset by sending a reset link to the user's email address. Calls the `POST /sdk/v1/passwords/email/reset/start` endpoint. Generates and stores a PKCE code pair for use in the subsequent [resetByEmail] call. - [Reset By Email](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/reset-by-email.md): Completes the email password reset flow by setting a new password using the token from the reset link. Calls the `POST /sdk/v1/passwords/email/reset` endpoint. Retrieves the PKCE code verifier stored during the corresponding [resetByEmailStart] call. - [Reset By Existing Password](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/reset-by-existing-password.md): Resets a user's password by verifying their existing password, then setting a new one. Calls the `POST /sdk/v1/passwords/existing_password/reset` endpoint. - [Reset By Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/reset-by-session.md): Resets a user's password using their active session for verification (no existing password required). Calls the `POST /sdk/v1/passwords/session/reset` endpoint. Requires an active session. - [Strength Check](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/passwords/strength-check.md): Checks the strength of a password and returns a score with actionable feedback. Calls the `POST /sdk/v1/passwords/strength_check` endpoint. Does not create a session. ##### Users - [Get User](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/users/get-user.md): Fetches the current user's full profile from the Stytch backend. Calls the `GET /sdk/v1/users/me` endpoint. Requires an active session. - [Delete Factor](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/users/delete-factor.md): Deletes an authentication factor from the current user's account. The endpoint called depends on the type of the [AuthenticationFactor] passed: - [AuthenticationFactor.TOTP] → `DELETE /sdk/v1/users/totps/{totp_id}` - [AuthenticationFactor.Email] → `DELETE /sdk/v1/users/emails/{email_id}` - [Authenti… - [Update](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/users/update.md): Updates the current user's profile. Calls the `PUT /sdk/v1/users/me` endpoint. Requires an active session. ##### Passkeys & WebAuthn - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/webauthn/register.md): Registers a new passkey for the current user. Performs a two-step flow: calls `POST /sdk/v1/webauthn/register/start` to get creation options, invokes the platform credential API to create the passkey, then calls `POST /sdk/v1/webauthn/register` to complete registration. Requires an active session. - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/webauthn/authenticate.md): Authenticates the user with an existing registered passkey. Performs a two-step flow: calls `POST /sdk/v1/webauthn/authenticate/start/primary` (no session) or `POST /sdk/v1/webauthn/authenticate/start/secondary` (with session) to get assertion options, invokes the platform credential API, then calls… - [Update](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/webauthn/update.md): Updates metadata for an existing passkey registration (e.g. sets a user-friendly display name). Calls the `PUT /sdk/v1/webauthn/update/{webauthn_registration_id}` endpoint. ##### Biometrics - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/biometrics/register.md): Registers the device's biometric credential (fingerprint, face, etc.) for the current user. Performs a two-step flow: calls `POST /sdk/v1/biometrics/register/start` to get a challenge, prompts the user for biometric authentication, then calls `POST /sdk/v1/biometrics/register` to complete registrati… - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/biometrics/authenticate.md): Authenticates the user using a previously registered biometric credential. Performs a two-step flow: calls `POST /sdk/v1/biometrics/authenticate/start` to get a challenge, prompts the user for biometric authentication, then calls `POST /sdk/v1/biometrics/authenticate` to complete. - [Remove Registration](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/biometrics/remove-registration.md): Removes the locally stored biometric registration keypair from this device. This is a local-only operation — it does not make a network call and does not remove the registration from the Stytch backend. Requires an active session. - [Get Availability](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/biometrics/get-availability.md): Returns the biometric availability status for the current device and user. This is a local-only operation — it does not make a network call. ##### OAuth - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/oauth/authenticate.md): Authenticates an OAuth token received from a deeplink after the browser-based OAuth flow completes. Calls the `POST /sdk/v1/oauth/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [OAuthType.start] call. - [Authenticate Google Id Token](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/oauth/authenticate-google-id-token.md): Authenticates a Google ID token obtained via native Android Google Sign-In. Calls the `POST /sdk/v1/oauth/google/id_token/authenticate` endpoint. - [Authenticate Apple Id Token](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/oauth/authenticate-apple-id-token.md): Authenticates an Apple ID token obtained via native iOS Sign In with Apple. Calls the `POST /sdk/v1/oauth/apple/id_token/authenticate` endpoint. - [Attach](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/oauth/attach.md): Creates an OAuth attach token that can be used to link an OAuth provider to an existing authenticated session. Calls the `POST /sdk/v1/oauth/attach` endpoint. Pass the returned attach token as `oauthAttachToken` in a subsequent [OAuthType.start] call. ##### Device Fingerprinting - [Get Telemetry Id](https://stytch.com/docs/api-reference/consumer/mobile-sdks/ios/methods/device-fingerprinting/get-telemetry-id.md): Returns a DFP telemetry ID generated by the Stytch device fingerprinting SDK. This is a local operation — it does not make a network call to the Stytch API. Pass the returned ID to your backend, which can use it in server-side Stytch DFP lookup calls. ### Android SDK - [Stytch Android Consumer SDK Overview](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/overview.md): Get started with the Stytch Android Consumer SDK for building secure authentication flows - [Installation](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/installation.md): How to install and set up the Stytch Consumer SDK in your Android application. - [Changelog](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/changelog.md): Version history and updates for the Stytch Android SDK - [Quickstart](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/quickstart.md): How to quickly get up and running with the Stytch Android SDK - [Upgrade Guide](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/upgrade-guide.md): How to upgrade between major versions of the SDK #### Methods ##### OTPs - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/authenticate.md): Authenticates a one-time passcode entered by the user, establishing a session. Calls the `POST /sdk/v1/otps/authenticate` endpoint. ###### Sms - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/sms/login-or-create.md): Sends a one-time passcode via SMS to the provided phone number, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/sms/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/sms/send.md): Sends a one-time passcode via SMS to an existing user's phone number. Routes to `POST /sdk/v1/otps/sms/send/primary` if no session is active, or `POST /sdk/v1/otps/sms/send/secondary` if a session exists (to add an additional auth factor). ###### Email - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/email/login-or-create.md): Sends a one-time passcode via email to the provided address, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/email/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/email/send.md): Sends a one-time passcode via email to an existing user's email address. Routes to `POST /sdk/v1/otps/email/send/primary` if no session is active, or `POST /sdk/v1/otps/email/send/secondary` if a session exists (to add an additional auth factor). ###### Whatsapp - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/whatsapp/login-or-create.md): Sends a one-time passcode via WhatsApp to the provided phone number, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/otps/whatsapp/login_or_create` endpoint. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/otps/whatsapp/send.md): Sends a one-time passcode via WhatsApp to an existing user's phone number. Routes to `POST /sdk/v1/otps/whatsapp/send/primary` if no session is active, or `POST /sdk/v1/otps/whatsapp/send/secondary` if a session exists (to add an additional auth factor). ##### Sessions - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/sessions/authenticate.md): Validates the current session token against the Stytch backend and optionally extends the session. Calls the `POST /sdk/v1/sessions/authenticate` endpoint. - [Revoke](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/sessions/revoke.md): Revokes the current session, signing the user out on the backend and clearing local session state. Calls the `POST /sdk/v1/sessions/revoke` endpoint. - [Attest](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/sessions/attest.md): Attests the current session using a Stytch Trusted Auth Token. Calls the `POST /sdk/v1/sessions/attest` endpoint. ##### Crypto Wallets - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/crypto-wallets/authenticate.md): Authenticates a crypto wallet by signing a server-issued challenge with the wallet's private key. Performs a two-step flow: calls `POST /sdk/v1/crypto_wallets/authenticate/start/primary` (no session) or `POST /sdk/v1/crypto_wallets/authenticate/start/secondary` (with session) to get a challenge stri… ##### Email Magic Links - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/email-magic-links/authenticate.md): Authenticates a magic link token received via deeplink, establishing a session for the user. Calls the `POST /sdk/v1/magic_links/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [EmailMagicLinksClient.loginOrCreate] or [EmailMagicLinksClient.send] call. ###### Email - [Login Or Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/email-magic-links/email/login-or-create.md): Sends a magic link email to the provided address, logging in an existing user or creating a new one. Calls the `POST /sdk/v1/magic_links/email/login_or_create` endpoint. Generates and stores a PKCE code pair for use in the subsequent [MagicLinksClient.authenticate] call. - [Send](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/email-magic-links/email/send.md): Sends a magic link email to an existing user's email address. Routes to `POST /sdk/v1/magic_links/email/send/primary` if no session is active, or `POST /sdk/v1/magic_links/email/send/secondary` if a session exists (to add an additional auth factor). Generates and stores a PKCE code pair for use in t… ##### TOTPs - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/totps/create.md): Creates a new TOTP instance for the current user and returns the secret, QR code URL, and recovery codes. Calls the `POST /sdk/v1/totps` endpoint. The user should scan the QR code with their authenticator app, then call [authenticate] to verify setup. - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/totps/authenticate.md): Authenticates a time-based one-time passcode from the user's authenticator app. Calls the `POST /sdk/v1/totps/authenticate` endpoint. - [Recover](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/totps/recover.md): Authenticates the user with a TOTP recovery code instead of a time-based code. Calls the `POST /sdk/v1/totps/recover` endpoint. Each recovery code can only be used once. - [Recovery Codes](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/totps/recovery-codes.md): Retrieves the recovery codes for the current user's TOTP instance. Calls the `POST /sdk/v1/totps/recovery_codes` endpoint. Requires an active session. ##### Passwords - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/authenticate.md): Authenticates a user with their email address and password, establishing a session. Calls the `POST /sdk/v1/passwords/authenticate` endpoint. - [Create](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/create.md): Creates a new user with an email address and password, and establishes a session. Calls the `POST /sdk/v1/passwords` endpoint. - [Reset By Email Start](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/reset-by-email-start.md): Initiates an email-based password reset by sending a reset link to the user's email address. Calls the `POST /sdk/v1/passwords/email/reset/start` endpoint. Generates and stores a PKCE code pair for use in the subsequent [resetByEmail] call. - [Reset By Email](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/reset-by-email.md): Completes the email password reset flow by setting a new password using the token from the reset link. Calls the `POST /sdk/v1/passwords/email/reset` endpoint. Retrieves the PKCE code verifier stored during the corresponding [resetByEmailStart] call. - [Reset By Existing Password](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/reset-by-existing-password.md): Resets a user's password by verifying their existing password, then setting a new one. Calls the `POST /sdk/v1/passwords/existing_password/reset` endpoint. - [Reset By Session](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/reset-by-session.md): Resets a user's password using their active session for verification (no existing password required). Calls the `POST /sdk/v1/passwords/session/reset` endpoint. Requires an active session. - [Strength Check](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/passwords/strength-check.md): Checks the strength of a password and returns a score with actionable feedback. Calls the `POST /sdk/v1/passwords/strength_check` endpoint. Does not create a session. ##### Users - [Get User](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/users/get-user.md): Fetches the current user's full profile from the Stytch backend. Calls the `GET /sdk/v1/users/me` endpoint. Requires an active session. - [Delete Factor](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/users/delete-factor.md): Deletes an authentication factor from the current user's account. The endpoint called depends on the type of the [AuthenticationFactor] passed: - [AuthenticationFactor.TOTP] → `DELETE /sdk/v1/users/totps/{totp_id}` - [AuthenticationFactor.Email] → `DELETE /sdk/v1/users/emails/{email_id}` - [Authenti… - [Update](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/users/update.md): Updates the current user's profile. Calls the `PUT /sdk/v1/users/me` endpoint. Requires an active session. ##### Passkeys & WebAuthn - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/webauthn/register.md): Registers a new passkey for the current user. Performs a two-step flow: calls `POST /sdk/v1/webauthn/register/start` to get creation options, invokes the platform credential API to create the passkey, then calls `POST /sdk/v1/webauthn/register` to complete registration. Requires an active session. - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/webauthn/authenticate.md): Authenticates the user with an existing registered passkey. Performs a two-step flow: calls `POST /sdk/v1/webauthn/authenticate/start/primary` (no session) or `POST /sdk/v1/webauthn/authenticate/start/secondary` (with session) to get assertion options, invokes the platform credential API, then calls… - [Update](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/webauthn/update.md): Updates metadata for an existing passkey registration (e.g. sets a user-friendly display name). Calls the `PUT /sdk/v1/webauthn/update/{webauthn_registration_id}` endpoint. ##### Biometrics - [Register](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/biometrics/register.md): Registers the device's biometric credential (fingerprint, face, etc.) for the current user. Performs a two-step flow: calls `POST /sdk/v1/biometrics/register/start` to get a challenge, prompts the user for biometric authentication, then calls `POST /sdk/v1/biometrics/register` to complete registrati… - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/biometrics/authenticate.md): Authenticates the user using a previously registered biometric credential. Performs a two-step flow: calls `POST /sdk/v1/biometrics/authenticate/start` to get a challenge, prompts the user for biometric authentication, then calls `POST /sdk/v1/biometrics/authenticate` to complete. - [Remove Registration](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/biometrics/remove-registration.md): Removes the locally stored biometric registration keypair from this device. This is a local-only operation — it does not make a network call and does not remove the registration from the Stytch backend. Requires an active session. - [Get Availability](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/biometrics/get-availability.md): Returns the biometric availability status for the current device and user. This is a local-only operation — it does not make a network call. ##### OAuth - [Authenticate](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/oauth/authenticate.md): Authenticates an OAuth token received from a deeplink after the browser-based OAuth flow completes. Calls the `POST /sdk/v1/oauth/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [OAuthType.start] call. - [Authenticate Google Id Token](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/oauth/authenticate-google-id-token.md): Authenticates a Google ID token obtained via native Android Google Sign-In. Calls the `POST /sdk/v1/oauth/google/id_token/authenticate` endpoint. - [Authenticate Apple Id Token](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/oauth/authenticate-apple-id-token.md): Authenticates an Apple ID token obtained via native iOS Sign In with Apple. Calls the `POST /sdk/v1/oauth/apple/id_token/authenticate` endpoint. - [Attach](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/oauth/attach.md): Creates an OAuth attach token that can be used to link an OAuth provider to an existing authenticated session. Calls the `POST /sdk/v1/oauth/attach` endpoint. Pass the returned attach token as `oauthAttachToken` in a subsequent [OAuthType.start] call. ##### Device Fingerprinting - [Get Telemetry Id](https://stytch.com/docs/api-reference/consumer/mobile-sdks/android/methods/device-fingerprinting/get-telemetry-id.md): Returns a DFP telemetry ID generated by the Stytch device fingerprinting SDK. This is a local operation — it does not make a network call to the Stytch API. Pass the returned ID to your backend, which can use it in server-side Stytch DFP lookup calls.