Setting up Two-Factor Authentication

Drupal.org has the additional level of account security made possible by two-factor authentication (TFA, also known as 2FA). This documentation page will guide you through setting up your Drupal.org account to use a second-factor of authentication when you next log in.

Overview

You enable two-factor authentication for your account by synchronizing a secret unique key between drupal.org and a mobile or desktop client in your possession. This secret key is used to generated short-lived codes that act as a second factor in determining your identity when logging into drupal.org. Read more about how two-factor authentication works on wikipedia.org.

Requirements

As part of this process you'll need to download and set up a mobile device or desktop client application that can generate TFA codes (known as TOTP codes). Popular client applications are 1Password, Google Authenticator, Authy, FreeOTP, and more. During TFA setup you will be presented with a link to these various applications or you can view more on a groups.drupal.org discussion on TOTP clients.

Setup steps

Log into your drupal.org account as you normally would.

Go to https://www.drupal.org/user-edit

Click on the link that says something like "Update your username, email address, first and last name, or set up two-factor authentication"