# Update a registration's credentials

> PATCH /registrations/{registration_id}/credentials

Source: https://docs.trykintsugi.com/reference/2026-10-06/update-a-registration-s-credentials

PATCH /registrations/{registration_id}/credentials

Update a registration's credentials

Change the stored sign-in credentials for a registration. Send a value for any of `username`, `password`, `pin`, `securityQuestions`, or `jurisdictionSpecificFields` to set it, and send `null` to clear it; a field you leave out is left unchanged. Sending `securityQuestions` replaces the stored set, and `[]` clears it. `jurisdictionSpecificFields` accepts California `cdtfaThirdPartyAccessSecurityCode` and Idaho `accessCode` only, each set with a string or cleared with `null`. Business name, registration type, and sales tax id are not credentials; set those with `PUT /registrations/{id}/jurisdiction-fields` first when the registration was created without them. Credentials are write-only: this returns the registration, never the values you sent, which are readable only through the credentials reveal endpoint.

Only an owner of the organization (or an API key scoped to it) may call it. Returns 404 if the registration does not exist or belongs to an organization your credential cannot access; 403 if your credential may read the organization but is not permitted to change credentials.

Category: Registrations

Path parameters:
registration_id (string, required) - The unique identifier of the registration.

Request body:
username (string) - Username for the jurisdiction's portal. Omit it to leave the stored username unchanged; send `null` to clear it. Write-only: reveal it through the credentials reveal endpoint.
password (string) - Password for the jurisdiction's portal, stored encrypted. Omit it to leave the stored password unchanged; send `null` to clear it. Write-only: reveal it through the credentials reveal endpoint.
pin (string) - PIN for the jurisdiction's portal, where one is used, stored encrypted. Omit it to leave the stored PIN unchanged; send `null` to clear it. Write-only: reveal it through the credentials reveal endpoint.
securityQuestions (PublicSecurityQuestion[]) - Security questions for the jurisdiction's portal, stored encrypted. Sending this replaces the stored set with the questions you send. Omit it to leave them unchanged; send `null` or `[]` to clear them. Write-only: reveal them through the credentials reveal endpoint.
  question (string, required) - The security question prompt shown by the jurisdiction portal.
[truncated, see the reference page]

---

Index of every page: https://docs.trykintsugi.com/llms.txt