two-factor authentication (2FA)
Table of Contents
step 1:login github first
Device verification
Email
We just sent your authentication code via email to y********@youdomain.com. The code will expire at 12:49AM CST.
Device Verification Code
input from your email
authentication code:558899step 2:
second login
choice forgot user password
display authentication code
step 3.use Authenticator Pro - Free and open-source two-factor authentication
https://www.iaspnetcore.com/blogpost-656ab4dc92f1cd0292988624-authenticator-pro-free-and-open-source-two-factor-authentication
Two-factor methods
you can choose one of the following options:
Security key
GitHub Mobile
Authenticator application (TOTP)
Text messages (SMS)
way 1：在GitHub上绑定手机号码
https://blog.csdn.net/y1534414425/article/details/110507278
way 2：Authenticator app
You can use recovery codes as a second factor to authenticate in case you lose access to your device. We recommend saving them with a secure password manager such as 1Password, Authy, or Keeper.1password 是收费软件，
Authy 免费版功能有限
Microsoft Authenticator
Authenticator Pro - Free and open-source two-factor authentication https://www.iaspnetcore.com/blogpost-656ab4dc92f1cd0292988624-authenticator-pro-free-and-open-source-two-factor-authentication
https://blog.csdn.net/freewzx2005/article/details/133956893
Microsoft Authenticator
选择微软的 Authenticator，HW手机已经不能通过应用商店或者扫描下载该应用，目前还可以在 百度手机助手 下载。
三星手机商店可以下载
keeper
当你无法进行两步认证时,你有如下几种方法来登录github
recovery-code
github设置了两步认证以后有一个recovery-code要你下载，并且会在邮件里面通知你，这时你最好是下载下来保存好。在github 2FA的说明里面解释说这是在丢失两步认证后能登录帐号的唯一方式。的确是这样，在两步认证没办法进行下去时，你可以输入你的recovery-code来登录github。如果你没有下载下来，那么往下
手机认证身份
国内没法绑定手机号
所以，github 2FA里的recovery code，一定要好好保存
source：
https://blog.94xychen.net/posts/github-2fa/
https://blog.csdn.net/i042416/article/details/109515200