4 ms·
Ask HN: Why should I enable GitHub 2FA?
Github has been nagging me to enable 2FA and now says I have days left to enable it.
I did follow the process and midway it told me if I loose access to recovery keys I will loose access to github account. I don't have a locker or similar safe place to store codes physically.
Why should I risk loosing my github by enabling 2FA?
- neximo64 4y agoBecause you could lose it by not enabling 2FA too, in a manner you can control less.
- oittaa 4y agoYeah, it's just playing the odds. If you don't have a safe, just print the 2FA recovery keys and put them in a closet where you have your passport and other important documents. The most important recovery keys, like probably your Gmail-account's, you might want to make extra copies and ask your parents or a friend to keep in case your house burns down or something.
- jjgreen 4y agoYou shouldn't, switch to GitLab
- Someone 4y ago> and midway it told me if I loose access to recovery keys I will loose access to github account. I doubt it told you that. I expect it told you that, if you lose access to your (password,2FA token) combination _and_ your recovery keys, you’ll lose access to your account. You normally never need your recovery keys. Recovery keys are a way more secure way to handle that then the “what’s your mother’s maiden name?” like questions traditionally used to handle “forgot my password”.