User Settings
Profile Account Appearance Security Blocked users Applications SSH / GPG Keys
Actions
Runners Secrets Variables
Packages Webhooks Organizations Repositories

Two-Factor Authentication (TOTP)

To protect your account against password theft, you can use a smartphone or another device for receiving time-based one-time passwords ("TOTP").

If you lose your device, you will be able to use a single-use recovery key to regain access to your account.

Your account is not currently enrolled in two-factor authentication.

Enroll into Two-Factor Authentication

Two-Factor Authentication (Security Keys)

Security keys are hardware devices containing cryptographic keys. They can be used for two-factor authentication. Security keys must support the WebAuthn Authenticator standard.

If you lose your security keys, you will lose access to your account. You may want to configure an additional authentication method.

Could not read your security key.
Your browser does not currently support WebAuthn.
An unknown error occurred. Please retry.
WebAuthn only supports secure connections. For testing over HTTP, you can use the origin "localhost" or "127.0.0.1"
The server could not process your request.
The security key is not permitted for this request. Please make sure that the key is not already registered.
You must set a name for this key.
Timeout reached before your key could be read. Please reload this page and retry.

Manage OpenID Addresses

OpenID lets you delegate authentication to an external provider.