diff --git a/clean_2f_tokens.md b/clean_2f_tokens.md
index d5957d0..f26ad56 100644
--- a/clean_2f_tokens.md
+++ b/clean_2f_tokens.md
@@ -1,4 +1,4 @@
-# How to remove 2 factor authentication tokens in IPA
+# How to remove 2 factor authentication tokens in IPA using ui
 
 * log into `https://id.fedoraproject.org/ipa/ui/` using noggin credentials 
 
@@ -10,3 +10,13 @@
 
 * Select the desired token and click delete. A popup will appear, click delete again to confirm.
 
+# How to remove 2 factor authentication tokens in IPA using cli
+
+* kinit as user with admin privileges on ipa server
+
+* Run `ipa otptoken-find --owner=<username>`
+
+* A list of the users otp tokens will be displayed. Copy `Unique ID` vlaue of the desired token
+
+* Run `ipa otptoken-del <Unique_ID>`. The token is now removed
+