Looking for Foss ones so here. Which one do you use regularly.

As you all now GitHub is pushing more and more to have 2FA enabled.

So my question is; What app are you using?

I can’t seem to figure out what app to choose, are they secure and which one is better?

Hi,

I created my 2FA via Github Mobile more than a month ago. I lived happily until the day before yesterday. Now it requires me to verify my settings:

Don't get locked out of your account. Download your recovery codes or add a passkey so you don't lose access when you get a new device.

I have no idea what Github wants of me. I tried reading the docs, and I get absolutely overwhelmed. The options seem limitless, the mechanics convoluted beyond any reason. I'm no security expert, I'm just a user. Please, help!

Whatever I do, I always end up with the authentication code requirement, which I can't supply.

Today I found out GitHub is going to make 2FA mandatory and now I'm staring at the possibility of not being able to access my account in a few weeks.

I checked the documentation and as far as I can tell all of the listed methods require the use of a mobile phone at some point.

I don't have a phone or tablet, and I don't intend to acquire one just to stay with GitHub, so my question is simple...

Is there any way I can keep access to my GitHub account without having to use a mobile phone at any stage of the process?

Failing that, which GitHub alternatives don't require the use of a mobile phone to create and use an account? E.g. could I use GitLab without needing to have a mobile phone?

Edit: Chrome extensions are also of no use to me as I use Firefox. I avoid anything Google-owned as much as I can.

I wasn't satisfied with existing two-factor authentication apps (specifically when using them to log into GitHub), so I made a 2FA app of my own. I put a lot of effort into designing and programming it (I'm an indie dev) and I'd love if you'd take the time to check it out, maybe share with a friend. Thank you!

https://chemicalx.berryscript.com/

GH is requiring 2FA. I don't have access to a smartphone, but 2FA seems to require one (i.e. text messages or apps).

Any help would be appreciated :)

I've had my GitHub account for awhile and I've been using it as the place for hosting my first big coding project. It's been going great so far but while I was looking at the fpm repo, I saw a banner at the top of the page stating that my account was chosen to be required for 2FA and I had until June 29th to do. I don't have a phone and I don't know of any desktop 2FA and I doubt the ones that do exist are completely untrustworthy. How can I ammend this or am I going to have to go to something like Source Forge?

I've been using github for a few years now, and recently its started hounding me about two-factor authentication.

I don't generally keep my phone around. Its often at home, or lost, and not being able to access my github repos is a problem.

Is there an option for github to send authentication codes to my email address instead?

I am always relying on using recovery codes.

Also, yes, I made sure my phone's time is in sync. That doesn't work. I use the Microsoft Authenticator app, and the temporary codes (not recovery codes) never works.

On a side note, I noticed this has been happening for years. GitHub needs to fix their 2FA system especially if they are going to require this BS.

Edit: Changed the 2FA method to SMS and it now works. Thank God. I guess Microsoft Authenticator has some issues with GitHub?

I can't access Github anymore, because they now need to "verify your identity".

Now, if I understand the relevant documentation I can't access anything unless I either :

• install some 3rd party app on my phone (lol not happening)

• install some 3rd party app on my computer or browser

• give away my phone number (LMAO how high are they)

If I recall, I provided an e-mail address when I created the account. Why not use it instead ?

I could also be PGP-challenged, that would 100% confirm this is me.

Or are they just willing to sweep more of their user's data ? No other reason to not have a non-third-party-install to achieve 2FA IMHO. Did I miss something.

Any thoughts on this ?

Am I gonna need to use throwaway VM / phone ? Which option did you guys personally choose ?

Thanks

So, I have a problem.

I don't currently have a phone, nor can I install browser extensions, so 2FA isn't an option. I've had to move to a forgejo instance since then, but I would like to still be able to do stuff on github.

Any ideas? (Some context, I had to create a new account since I was locked out of my old one due to... you guessed it, 2FA, and I guess it got marked as spam for some reason)

Well, finally github has locked my account requiring f2a set up to go on...

What options do you use? It states that I can use either SMS or 3d party app... Authy required SMS as well. Which apparently doesn't work for my provider. Do you know some other ways? Without being locked to mobile op / buying phisical key / paying to 3rd party provider etc. I just want to store the key on my device.

Thank you.

Github is forcing 2FA which is good but I can't use it and I will soon be locked out of my account.

github offers 2 authentication methods:

1- through an authentication app: I use a dumb phone as my only phone so I can't install any authentication app. bitwarden is my password manager and it doesn't offer 2fA for free

2- by SMS: github doesn't currently send SMS to my country of tunisia so I can't use that

so that's the situation

Hi all,

I have 2 accounts at GitHub -- one is my personal and second is for business (the company develops FOSS). Recently GitHub forces to enter the mobile number for the 2FA of the second account. Will I have a problem if use same mobile number for both accounts? Who already tried?

Each time I visit github, github says "Two-factor authentication (2FA) is required for your GitHub account". I've activated it already four times, with four entries in my Microsoft Authenticator on my phone, but github keeps asking.

Any tips how to solve this?

Like everyone else, I used to use a password to login to Github. Recently, that became not secure enough, so I started using SSH keys. That works well enough but I notice there also an option to use GPG keys. I know what they are but didn't use them.

Today, I'm invited to a repo that requires 2FA. I don't want to give Github my phone number, and I don't carry a smart phone any more. But I'm happy with SSH keys and I have a Yubikey. So I look into the details and now I'm utterly lost over what I can actually do.

I might convert 'a security key' to 'a passkey' but its not clear if that's going to be allowed or not, or whether an SSH key is a 'security key' in that sense. I can use a device like the Yubikey, but possibly not because mine doesn't have a fingerprint reader. Also, passkeys can be enabled as a beta feature. I'm also concerned that enabling 2FA will ruin my workflow. Like I'll have to reply to a text every time I start my git GUI or an IDE with a git plugin.

Public key, passkey, security key, yubikey. So many keys, how many locks does it need? Or maybe its not enabled anyway. What exactly am I supposed to do?