Permanently delete the authenticated user's account

Permanently erases the dashboard user account belonging to the caller. This is a self-service GDPR Article 17 right-to-erasure for the signed-in user. Requires a fresh password re-authentication in the request body. SSO- only accounts (no local password) cannot use this endpoint and must contact support — those callers receive `400`. Rate-limited per account to prevent password-guessing.

Headers

Verifa-VersiondateOptional

API version date string (e.g. 2026-02-01). If omitted, the version pinned to your API key is used.

Idempotency-KeystringOptional<=255 characters

Unique key for idempotent requests. Cached for 24 hours. Sending the same key with different parameters returns 422.

Request

This endpoint expects an object.
passwordstringRequiredformat: "password"<=256 characters

The user’s current password (re-authentication).

confirmbooleanRequired

Must be true — explicit acknowledgement that the deletion is irreversible.

Response

Account deleted.
deletedboolean

Errors

400
Bad Request Error
401
Unauthorized Error
429
Too Many Requests Error