Step 2 · about 8 minutes
Verify your email and turn on 2FA
Two-factor authentication means a code from your phone is needed as well as your password. GitHub requires it, and it is the single best thing you can do to keep your work yours.
Open the email GitHub sent you and click the link inside. Then, on GitHub, click your picture in the top-right corner and choose Settings, then Password and authentication.
- Choose Enable two-factor authentication.
- Pick an authenticator app. Install one on your phone if you have none — Google Authenticator and 1Password both work.
- Scan the square barcode with that app, then type the six digits it shows.
- Save the recovery codes it gives you somewhere that is not your computer.
public/shots/gh-02-2fa.png