GitHub is making 2FA mandatory for devs — here’s how to enable it

The company will make 2FA mandatory for all code contributors by 2023-end

Enabling two-factor authentication

While GitHub’s mandatory 2FA rollout will take effect next year, you can enable it right now to increase a project’s security.

The company allows you to use multiple methods for 2FA, including SMS, a time-based one-time password (TOTP) service like 1Password or Authy, and a fingerprint reader like Touch ID on Mac or Windows Hello. GitHub also supports integration with physical security keys like Yubikey.

Here’s how you can enable 2FA on your GitHub account:

Viola, you’re done!

For extra security, you can head back toPassword and Authentication>Two-Factor Authentication, and add new methods like Touch ID on your Mac, an Android device, or a physical security key.

Plus, once you enable 2FA, you can use the GitHub mobile app to approve new sign-ins. Watch it in action in the GIF below.

You can read about setting up your security for your accounthere.

Hopefully, we’ll see an uptick in accounts using 2FA before the mandatory rollout begins. Secure your shit, people.

Story byIvan Mehta

Ivan covers Big Tech, India, policy, AI, security, platforms, and apps for TNW. That’s one heck of a mixed bag. He likes to say “Bleh.“Ivan covers Big Tech, India, policy, AI, security, platforms, and apps for TNW. That’s one heck of a mixed bag. He likes to say “Bleh.”

Get the TNW newsletter

Get the most important tech news in your inbox each week.

Also tagged with

More TNW

About TNW

How to build a dev knowledge base ahead of your next job

GitHub offers to rehire employee it fired for calling insurrectionists ‘Nazis’

Discover TNW All Access

GitHub Copilot works so well because it steals open-source code and strips credit

The curious case of the Ubiquiti employee-whistleblower-hacker