2FA.html

---
title: 2FA Guide
description: Hack for LA requires two-factor authentication (2FA) in GitHub for all project contributors.
short-description: 
in-this-guide:
  - name: To Enable 2FA
    link: '#To-Enable-2FA'
  - name: FAQ
    link: '#FAQ'
card-type: guide-page
status: completed
display: true
practice-area: Development
tools: 
  - GitHub
contributors: 
  - Danielle Nedivi
source: Hack for LA
recommended-by: 
svg: /assets/images/guides/2FA/2FA.svg
resource-url-completed: '/guide-pages/2FA'
resource-url-wip:
resource-url-depreciated:
---

<div class="content-section">

    <a class="anchor" id="To-Enable-2FA"></a>
    <div class="section-container">
        <div>
            <h3 class="title-left"><strong>To Enable 2FA:</strong></h3>
            <h5 class="title-left"><strong>Visit and follow <a href="https://docs.github.com/en/github/authenticating-to-github/configuring-two-factor-authentication" target="blank">Github's Guide to Setting Up 2FA</a></strong></h5>
        </div>

        <div>
            <br><p>If you already have a 2FA application on your mobile phone, you can use that.  If you do not already have a 2FA application you will be instructed to download your mobile app of choice (we have had good luck with Authy) and follow the detailed instructions to complete configuration in GitHub.</p><br>
        </div>

        <div class="screenshot-2FA">
            <img src="../assets/images/guides/2FA/2FA-Screenshot.png" alt="GitHub's guide on configuring two factor authentication using time-based one-time password. Authy is highlighted because Hack for LA contributors prefer the Authy mobile application">
        </div>
    </div>


    <div class="section-container">
        <a class="anchor" id="FAQ"></a>
        <div class="step-header">
            <h3>Frequently Asked Questions</h3>
        </div>
        <div>


            <p class="accordion">What is 2FA? </p>

            <div class="panel">
                <p>Two-factor authentication, or 2FA, is an extra layer of security used when logging into websites or apps. With 2FA, you have to log in with your username and password, and then provide another form of authentication that only you know or have access to.</p>
                <a href="">Read more information about 2FA at GitHub</a>

            </div>

            <p class="accordion">Why set up 2FA now? </p>
            <div class="panel">
                <ul>
                    <li>We are in the process of establishing best practices on Hack for LA projects and in the HfLA  organization’s GitHub account.</li>
                    <li>There have been recent news items about hackers attempting to hold open source  repositories for ransom. Although these attempts have mostly been unsuccessful, it is still a  good reminder that we should use security best practices.</li>
                </ul>

            </div>
            <p class="accordion">Encountering challenges using Git CLI after setting up 2FA? (Developers) </p>
            <div class="panel">

                <p>You might encounter a challenge using the Git CLI after enabling 2-Factor Authentication if you have not used the ssh link for the repo URL.</p><br>

                <p class="indent">If you clone via the ssh URL for a repo, e.g.</p>
                <p class="indent"><mark class="highlight"><code>git@github.com:hackforla/governance.git</code></mark></p>
                <p class="indent">instead of the <mark class="highlight">https</mark> URL, e.g.</p>
                <p class="indent"><mark class="highlight"><code>https://github.com/hackforla/governance.git</code></mark></p>
                <p class="indent">then you probably won't run into any issues after enabling 2FA, as you already use an SSH key.</p><br>

                <p>Read more about <a href="https://docs.github.com/en/github/authenticating-to-github/connecting-to-github-with-ssh" target="blank">connecting to GitHub with SSH.</a></p>
                <p>Also, these steps might help you get the CLI auth working again:</p>
                <ol>
                    <li><p>Try pushing code from the CLI, if you get rejected unexpectedly it’s 2FA (if you enabled it)</p></li>
                    <li><p><a href="https://devconnected.com/how-to-clear-git-cache/#:~:text=The%20easiest%20way%20to%20clear,remove%20an%20entire%20working%20directory." target="blank">Clear your cached GH credentials</a></p></li>
                    <li><p><a href="https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token" target="blank">Create a token at GH.com, which you’ll use as your CLI password</a></p></li>
                </ol><br>
                <p>If you are still having issues using 2FA with your CLI, please reach out to the <a href="https://app.slack.com/client/T04502KQX/CV7QGL66B" target="blank">#ops</a> channel on the Hack for LA Slack.</p>
            </div>
        </div>
    </div>

    <!-- Refactor Javascript, moved script to 2FA.js, issue #2068
    <div class='section-container' style="display: none;">
        <a class='anchor' id='Member-Analytics'></a>
        <div class="step-header">
            <h3>Member Analytics</h3>
        </div>
        <div class='getting-started-guide-content-section'>
            <div>
                <div class="donut-chart">
                    <canvas id="myCanvas" class="step-header"></canvas>
                    <script src="../../assets/js/2FA.js" type="module"></script>
                </div>
                <ul class="donut-list">
                    <li><span class="dot used"></span>New Members that have 2FA.</li>
                    <li><span class="dot never-used"></span>New Members that have never used 2FA.</li>
                </ul>
            </div>
        </div>
    </div>
    -->
</div>
<script src ="/assets/js/elements/accordion.js"></script>