


Registering a security key for your account is available after enabling 2FA with a TOTP application. Most browsers can use the fingerprint reader, facial recognition, or password/PIN on your device as a security key as well. On most devices and browsers, you can use a physical security key over USB or NFC. For more information, see " WebAuthn" and " Can I Use." WebAuthn is the successor to U2F and works in all modern browsers. The technology that enables authentication with a security key is called WebAuthn. In case of problems, such as a forgotten password or typo in your email address, you can use recovery codes to access your account and correct the problem.Ĭonfiguring two-factor authentication using a security keyĪfter you configure 2FA, using a time-based one-time password (TOTP) mobile app, you can add a security key, like a fingerprint reader or Windows Hello. For more details on how to configure each additional method, see " Configuring two-factor authentication" and " Configuring two-factor authentication".Īfter you've saved your recovery codes and enabled 2FA, we recommend you sign out and back in to your account. Optionally, you can configure additional 2FA methods to reduce your risk of account lockout.

Save them to a secure location because your recovery codes can help you get back into your account if you lose access.Īfter saving your two-factor recovery codes, click I have saved my recovery codes to enable two-factor authentication for your account. Under "Save your recovery codes", click Download to download your recovery codes to your device. On GitHub Enterprise Server, type the code into the field under "Enter the six-digit code from the application". The TOTP mobile application saves your account on your GitHub Enterprise Server instance and generates a new authentication code every few seconds.

If you can't scan the QR code, click enter this text code to see a code that you can manually enter in your TOTP app instead.After scanning, the app displays a six-digit code that you can enter on GitHub Enterprise Server. Scan the QR code with your mobile device's app.Under "Authentication verification", do one of the following: Under "Two-factor authentication", select Set up using an app and click Continue. In the "Two-factor authentication" section of the page, click Enable two-factor authentication. In the "Access" section of the sidebar, click Password and authentication. In the upper-right corner of any page, click your profile photo, then click Settings. If 2FA is already enabled and you want to add another device, you must re-configure your TOTP app from your security settings. Tip: To configure authentication via TOTP on multiple devices, during setup, scan the QR code using each device at the same time.
