# Start a passwordless authentication

Starts a passwordless authentication.
**IMPORTANT**: For passwordless authentication, first is required to send a POST to request an email to be sent to the user’s email with a link for the user to click on to verify his email.

Endpoint: POST /v3/users/token-exchange
Version: 2026-09-18
Security: ZephrHmacHttp

## Security:

  - `ZephrHmacHttp` (unknown)
    http ZEPHR-HMAC-*

## Request fields (application/json):

  - `identifiers` (object, required)

  - `identifiers.email_address` (string)

  - `delivery` (object, required)

  - `delivery.method` (string)

  - `delivery.destination` (string)

  - `delivery.action` (string)

  - `delivery.redirect` (string)

## Response 201:

  - `201` (unknown)
    Created

## Response 400:

  - `400` (unknown)
    Bad Request