> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corebanq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get security settings

> Retrieve user security settings and status



## OpenAPI

````yaml get /v1/profile/security
openapi: 3.0.0
info:
  title: Profile API
  version: 1.0.0
  description: API for managing user profiles and profile trays
servers: []
security:
  - bearerAuth: []
tags:
  - name: Profile
    description: Profile management operations
paths:
  /v1/profile/security:
    get:
      tags:
        - Profile
      summary: Get security settings
      description: Retrieve user security settings and status
      responses:
        '200':
          description: Security settings retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecuritySettings'
              example:
                two_factor_method: app
                backup_codes_remaining: 5
                last_password_change: '2024-01-15T10:00:00Z'
                active_sessions:
                  - device: Chrome on MacOS
                    ip: 192.168.1.1
                    last_active: '2024-03-21T14:30:00Z'
                    location: Zurich, Switzerland
components:
  schemas:
    SecuritySettings:
      type: object
      properties:
        two_factor_method:
          type: string
          enum:
            - none
            - app
            - sms
            - email
          description: Current 2FA method
        backup_codes_remaining:
          type: integer
          description: Number of backup codes remaining
        last_password_change:
          type: string
          format: date-time
          description: Last password change timestamp
        active_sessions:
          type: array
          items:
            $ref: '#/components/schemas/Session'
    Session:
      type: object
      properties:
        device:
          type: string
          description: Device and browser information
        ip:
          type: string
          format: ipv4
          description: IP address
        last_active:
          type: string
          format: date-time
          description: Last activity timestamp
        location:
          type: string
          description: Geolocation information
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT

````