Two-factor Authentication

Today we're adding two-factor authentication to GitHub.

When you enable this feature, it adds an additional layer of security to your account. When logging in to GitHub, after providing your username and password, you will be asked for a two-factor authentication code that is delivered to your mobile device via SMS or a free two-factor application. This additional step ensures that a malicious person who has discovered your password will not be able to log in to GitHub as you.

How do I enable it?

You can find a link in your account settings.

You can find more information about setting up two-factor authentication on the documentation page.

Enabling this feature will affect more than just your GitHub.com login experience. Visit this help article to learn how two-factor authentication works with HTTPS Git, GitHub for Mac, GitHub for Windows, and the API.

How does it work on GitHub.com?

After entering your username and password, you will be prompted for a two-factor authentication code.

This code can obtained from your mobile device through one of two methods:

A text message
A free two-factor application on your mobile device

After entering the code, you will be logged in.

How does it work for command-line Git?

If you are using SSH for Git authentication, rest easy: you don't need to do anything. If you are using HTTPS Git, instead of entering your password, enter a personal access token. These can be created by going to your personal access tokens page.