GitHub's Copy/Text is unclear with regards to 2FA verification.

[nicksim-reg1]

🏷️ Discussion Type

Question

💬 Feature/Topic Area

Code Search and Navigation

Body

Can someone please help me understand what am i suppose to do here? It is asking me to verify my recent 2FA method - but like - WHAT? What am i suppose to input? Where am i suppose to get a code? Checked all my emails, github application - found nothing. Encountered this multiple times but it allows me to be able to skip the step for now.. so thank god.

[praxezz]

hey,nicksim

That screen means GitHub wants you to confirm a 2FA method that was recently added to your account.

What to enter: a 6-digit code from whichever method you set up —

• Authenticator app (Google Authenticator, Authy, etc.) — get the code from there
• SMS — check for a text with a code
• Email — check the inbox linked to your GitHub account (including spam/promotions folders) — note: Gmail itself doesn't generate the code, GitHub just might send it to your Gmail address
• Security key — click "More options" to use it instead

Don't recognize any of this?

1. Click "More options" — it'll list your registered 2FA methods.
2. Try a recovery code if you saved one when 2FA was first set up.
3. Still stuck? Go to github.com/contact and use the "lost 2FA access" recovery flow — support can manually verify and reset it.

Also worth mentioning: if you can keep "skipping" this, your 2FA setup may be misconfigured — good idea to review and fix it, not just skip past it.

[nicksim-reg1]

Thank you, i will try when it appears again. It is just strange that i couldn't find the code anywhere.. be it email, authenticator, github app etc.

[EiJackGH]

Thank you, i will try when it appears again. It is just strange that i couldn't find the code anywhere.. be it email, authenticator, github app etc.

Yes

[Yigtwxx]

Adding to what praxezz said: this prompt specifically shows up when GitHub detects a new device or browser signing in and wants to confirm it's you, tied to whatever 2FA method is already on the account — it's not generating a fresh code out of nowhere for you to go find.

If you've genuinely never set up 2FA and don't recognize any of the listed methods, check Settings → Password and authentication to see what's actually registered on your account. It's possible a method got added without you realizing (e.g. during a previous session), or that this is tied to an SSO/org policy rather than something you configured yourself.

If nothing there matches what the prompt is asking for, that mismatch itself is worth reporting via github.com/contact — it suggests either a stale 2FA method or an account security issue, not just unclear copy.

[nicksim-reg1]

I do remember setting 2FA up.. i think it was mandatory at some point. And i remember having to open my github app on my phone to authenticate. Which is what i found confusing, because opening the app did not prompt me as per usual. The copy should provide clear guidance on where the user should look for the code. Azure does this, so why cant github? 😂 It sounds like the user is verifying the setup/configuration itself, not completing a verification challenge using that method.