docs/content/authentication/securing-your-account-with-two-factor-authentication-2fa/about-two-factor-authentication.md

title, intro, redirect_from, versions, topics, shortTitle

title	intro	redirect_from	versions	topics	shortTitle
About two-factor authentication	{% data reusables.two_fa.about-2fa %} With 2FA, you have to log in with your username and password and provide another form of authentication that only you know or have access to.	/articles/about-two-factor-authentication /github/authenticating-to-github/about-two-factor-authentication /github/authenticating-to-github/securing-your-account-with-two-factor-authentication-2fa/about-two-factor-authentication	fpt ghes ghec * * *	2FA	About 2FA

{% ifversion mandatory-2fa-dotcom-contributors %} {% data reusables.two_fa.mandatory-2fa-contributors-2023 %} {% endif %}

For {% data variables.product.product_name %}, the second form of authentication is a code that's generated by an application on your mobile device{% ifversion fpt or ghec %} or sent as a text message (SMS){% endif %}. After you enable 2FA, {% data variables.product.product_name %} generates an authentication code any time someone attempts to sign into your account on {% data variables.location.product_location %}. The only way someone can sign into your account is if they know both your password and have access to the authentication code on your phone.

{% data reusables.two_fa.after-2fa-add-security-key %}

{% ifversion fpt or ghec %} In addition to security keys, you can also use {% data variables.product.prodname_mobile %} for 2FA after configuring a TOTP mobile app or text messages. {% data variables.product.prodname_mobile %} uses public-key cryptography to secure your account, allowing you to use any mobile device that you've used to sign in to {% data variables.product.prodname_mobile %} as your second factor. {% endif %}

You can also configure additional recovery methods in case you lose access to your two-factor authentication credentials. For more information on setting up 2FA, see "AUTOTITLE" and "AUTOTITLE."

{% ifversion fpt or ghec %} {% note %}

Note: {% data reusables.two_fa.unlink-email-address %}

{% endnote %} {% endif %}

We strongly urge you to enable 2FA for the safety of your account, not only on {% data variables.product.product_name %}, but on other websites and apps that support 2FA. You can enable 2FA to access {% data variables.product.product_name %} and {% data variables.product.prodname_desktop %}.

For more information, see "AUTOTITLE."

Two-factor authentication recovery codes

{% data reusables.two_fa.about-recovery-codes %} For more information, see "AUTOTITLE."

{% ifversion fpt or ghec %}

{% warning %}

Warning: {% data reusables.two_fa.support-may-not-help %} For more information, see "AUTOTITLE."

{% endwarning %}

{% endif %}

Requiring two-factor authentication in your organization

Organization owners can require that organization members{% ifversion fpt or ghec %}, billing managers,{% endif %} and outside collaborators use two-factor authentication to secure their personal accounts. For more information, see "AUTOTITLE."

{% data reusables.two_fa.auth_methods_2fa %}