You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/authentication/securing-your-account-with-two-factor-authentication-2fa/changing-your-preferred-two-factor-authentication-method.md
You can reconfigure your two-factor authentication (2FA) settings or add new 2FA methods without disabling 2FA entirely, allowing you to keep both your recovery codes and your membership in organizations that require 2FA.
19
+
20
+
## Changing an existing two-factor authentication method
21
+
22
+
{% ifversion fpt or ghec %}
23
+
You can configure a different authenticator app or change your phone number, without disabling 2FA or creating a new set of recovery codes.
24
+
25
+
### Changing the TOTP app
26
+
27
+
{% endif %}
28
+
29
+
You can change the time-based one-time password (TOTP) application you use to generate authentication codes
30
+
31
+
{% data reusables.user-settings.access_settings %}
32
+
{% data reusables.user-settings.security %}
33
+
{% data reusables.two_fa.edit-existing-method %}
34
+
{% data reusables.two_fa.enable-totp-app-method %}
35
+
{% data reusables.two_fa.save-2fa-method-when-editing%}
36
+
37
+
{% warning %}
38
+
39
+
**Warning:** Changes to an existing 2FA method will only take effect after you have provided a valid code from the new method and clicked **Save**. Only replace the existing 2FA method on your device (e.g. the {% data variables.product.prodname_dotcom %} entry in your TOTP app) after your new method is saved to your {% data variables.product.prodname_dotcom %} account completely.
40
+
41
+
{% endwarning %}
42
+
43
+
{% data reusables.two_fa.manual-totp-app-setup %}
44
+
45
+
{% ifversion fpt or ghec %}
46
+
47
+
### Changing the SMS number
48
+
49
+
You can change the phone number you use to receive authentication codes via SMS.
50
+
51
+
{% data reusables.user-settings.access_settings %}
52
+
{% data reusables.user-settings.security %}
53
+
{% data reusables.two_fa.edit-existing-method %}
54
+
{% data reusables.two_fa.enable-sms-number-method %}
55
+
{% data reusables.two_fa.save-2fa-method-when-editing%}
We recommend adding more than one 2FA method to your account. This ensures that you can still sign in to your account, even if you lose one of your methods.
62
+
63
+
In addition to adding multiple 2FA methods, we strongly recommend setting up multiple recovery methods to avoid losing access to your account. For more information, see "[AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication-recovery-methods)."
64
+
65
+
{% ifversion fpt or ghec %}
66
+
67
+
### Adding a TOTP app
68
+
69
+
You can add a time-based one-time password (TOTP) application to generate authentication codes.
70
+
{% endif %}
71
+
72
+
{% data reusables.user-settings.access_settings %}
73
+
{% data reusables.user-settings.security %}
74
+
{% data reusables.two_fa.add-additional-method %}
75
+
{% data reusables.two_fa.enable-totp-app-method %}
76
+
{% data reusables.two_fa.save-2fa-method-when-editing%}
77
+
{% data reusables.two_fa.manual-totp-app-setup %}
78
+
79
+
{% ifversion fpt or ghec %}
80
+
81
+
### Adding an SMS number
82
+
83
+
{% data reusables.two_fa.sms-warning %}
84
+
85
+
{% data reusables.user-settings.access_settings %}
86
+
{% data reusables.user-settings.security %}
87
+
{% data reusables.two_fa.add-additional-method %}
88
+
{% data reusables.two_fa.enable-sms-number-method %}
89
+
{% data reusables.two_fa.save-2fa-method-when-editing%}
90
+
91
+
{% endif %}
92
+
93
+
## Setting a preferred two-factor authentication method
94
+
95
+
If you have multiple 2FA methods, you can choose a preferred method that will be shown first when you are asked to authenticate with 2FA.
96
+
97
+
{% data reusables.user-settings.access_settings %}
98
+
{% data reusables.user-settings.security %}
99
+
1. Under "Two-factor authentication" in "Preferred 2FA method", select your preferred 2FA method from the dropdown.
Copy file name to clipboardExpand all lines: content/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication.md
+6-36Lines changed: 6 additions & 36 deletions
Original file line number
Diff line number
Diff line change
@@ -66,56 +66,26 @@ A time-based one-time password (TOTP) application automatically generates an aut
66
66
{% data reusables.user-settings.access_settings %}
67
67
{% data reusables.user-settings.security %}
68
68
{% data reusables.two_fa.enable-two-factor-authentication %}
69
-
{%- ifversion fpt or ghec or ghes > 3.8 %}
70
-
1. Under "Setup authenticator app", do one of the following:
71
-
- Scan the QR code with your mobile device's app. After scanning, the app displays a six-digit code that you can enter on {% data variables.product.product_name %}.
72
-
- If you can't scan the QR code, click **setup key** to see a code, the TOTP secret, that you can manually enter in your TOTP app instead.
73
-
74
-
75
-
1. The TOTP application saves your account on {% data variables.location.product_location %} and generates a new authentication code every few seconds. On {% data variables.product.product_name %}, type the code into the field under "Verify the code from the app".
76
-
{%- else %}
77
-
1. Under "Two-factor authentication", select **Set up using an app** and click **Continue**.
78
-
1. Under "Authentication verification", do one of the following:
79
-
- Scan the QR code with your mobile device's app. After scanning, the app displays a six-digit code that you can enter on {% data variables.product.product_name %}.
80
-
- If you can't scan the QR code, click **enter this text code** to see a code that you can manually enter in your TOTP app instead.
81
-
82
-
1. The TOTP application saves your account on {% data variables.location.product_location %} and generates a new authentication code every few seconds. On {% data variables.product.product_name %}, type the code into the field under "Enter the six-digit code from the application".
83
-
{%- endif %}
69
+
{% data reusables.two_fa.enable-totp-app-method %}
84
70
{% data reusables.two_fa.save_your_recovery_codes_during_2fa_setup %}
85
71
{% data reusables.two_fa.backup_options_during_2fa_enrollment %}
If you wish to setup a TOTP app manually, and require the parameters encoded in the QR code, they are:
89
-
- Type: `TOTP`
90
-
- Label: `GitHub:<username>` where `<username>` is your handle on GitHub, for example `monalisa`
91
-
- Secret: This is the encoded setup key, shown if you click {%- ifversion fpt or ghec or ghes > 3.8 %}"setup key"{%- else %}"enter this text code"{%- endif %} during configuration
92
-
- Issuer: `GitHub`
93
-
- Algorithm: The default of SHA1 is used
94
-
- Digits: The default of 6 is used
95
-
- Period: The default of 30 (seconds) is used
73
+
### Manually configuring a TOTP app
74
+
75
+
{% data reusables.two_fa.manual-totp-app-setup %}
96
76
97
77
{% ifversion fpt or ghec %}
98
78
99
79
## Configuring two-factor authentication using text messages
100
80
101
81
If you're unable to configure a TOTP app, you can also register your phone number to receive SMS messages.
102
82
103
-
Before using this method, be sure that you can receive text messages. Carrier rates may apply.
104
-
105
-
{% warning %}
106
-
107
-
**Warning:** We **strongly recommend** using a TOTP application for two-factor authentication instead of SMS, and security keys as backup methods instead of SMS. {% data variables.product.product_name %} doesn't support sending SMS messages to phones in every country. Before configuring authentication via text message, review the list of countries where {% data variables.product.product_name %} supports authentication via SMS. For more information, see "[AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/countries-where-sms-authentication-is-supported)".
108
-
109
-
{% endwarning %}
83
+
{% data reusables.two_fa.sms-warning %}
110
84
111
85
{% data reusables.user-settings.access_settings %}
112
86
{% data reusables.user-settings.security %}
113
87
{% data reusables.two_fa.enable-two-factor-authentication %}
114
-
1. At the bottom of the page, next to "SMS authentication", click **Select**.
115
-
1. Complete the CAPTCHA challenge, which helps protect against spam and abuse.
116
-
1. Under "Setup SMS authentication", select your country code and type your mobile phone number, including the area code. When your information is correct, click **Send authentication code**.
117
-
1. You'll receive a text message with a security code. On {% data variables.product.product_name %}, type the code into the field under "Verify the code sent to your phone" and click **Continue**.
118
-
- If you need to edit the phone number you entered, you'll need to complete another CAPTCHA challenge.
88
+
{% data reusables.two_fa.enable-sms-number-method %}
119
89
{% data reusables.two_fa.save_your_recovery_codes_during_2fa_setup %}
120
90
{% data reusables.two_fa.backup_options_during_2fa_enrollment %}
Copy file name to clipboardExpand all lines: content/authentication/securing-your-account-with-two-factor-authentication-2fa/disabling-two-factor-authentication-for-your-personal-account.md
+8-6Lines changed: 8 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -18,18 +18,20 @@ shortTitle: Disable 2FA
18
18
{% data reusables.two_fa.mandatory-2fa-contributors-2023 %}
19
19
{% endif %}
20
20
21
-
We strongly recommend using two-factor authentication to secure your account. If you need to disable 2FA, we recommend re-enabling it as soon as possible.
22
-
23
-
{% ifversion mandatory-2fa-dotcom-contributors %}
24
-
If you are part of the group that {% data variables.product.prodname_dotcom %} is requiring to enroll in 2FA in 2023, you cannot disable 2FA. A banner will display in your authentication settings to remind you that you are not allowed to disable 2FA. For more information about our 2023 2FA enrollment rollout for contributors to {% data variables.product.prodname_dotcom_the_website %}, see [this blog post](https://github.blog/2023-03-09-raising-the-bar-for-software-security-github-2fa-begins-march-13).
25
-
{% endif %}
26
-
27
21
{% warning %}
28
22
29
23
**Warning:** If you're a member{% ifversion fpt or ghec %}, billing manager,{% endif %} or outside collaborator to a public repository of an organization that requires two-factor authentication and you disable 2FA, you'll be automatically removed from the organization, and you'll lose your access to their repositories. To regain access to the organization, re-enable two-factor authentication and contact an organization owner.
30
24
31
25
{% endwarning %}
32
26
27
+
We strongly recommend using two-factor authentication (2FA) to secure your account. If you need to disable 2FA, we recommend re-enabling it as soon as possible.
28
+
29
+
{% ifversion mandatory-2fa-dotcom-contributors %}
30
+
If you are part of the group that {% data variables.product.prodname_dotcom %} is requiring to enroll in 2FA in 2023, you cannot disable 2FA. A banner will display in your authentication settings to remind you that you are not allowed to disable 2FA. For more information about our 2023 2FA enrollment rollout for contributors to {% data variables.product.prodname_dotcom_the_website %}, see [this blog post](https://github.blog/2023-03-09-raising-the-bar-for-software-security-github-2fa-begins-march-13).
31
+
32
+
You can modify your existing 2FA configuration instead of disabling it entirely. For more information, see "[AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/changing-your-two-factor-authentication-method)."
33
+
{% endif %}
34
+
33
35
If your organization requires two-factor authentication and you're a member, owner, or an outside collaborator on a private repository of your organization, you must first leave your organization before you can disable two-factor authentication.
1. In "Two-factor methods", find the method you want to add. Next to that method, click **Add**.
2
+
3
+
1. In "Two-factor methods", find the method you want to modify. Next to that method, click **Edit**. If you have multiple methods configured, select {% octicon "kebab-horizontal" aria-label="Manage METHOD" %}, then click **Edit**.
2
+
3
+
0 commit comments