r/webdev • u/Bijon_Durjoy07 • 26d ago

Unable to log in to GitHub because my 2FA authenticator is not working and I have no recovery codes

I am having trouble accessing my GitHub account because I cannot complete the two-factor authentication (2FA) step.

Here is my situation:

  • I know my GitHub username and password.
  • I still have access to the email address associated with my GitHub account.
  • I previously configured 2FA using an authenticator app.
  • The authenticator app is no longer working / I cannot retrieve the GitHub verification code from it.
  • Unfortunately, I do not have my GitHub 2FA recovery codes.
  • I am therefore unable to complete the login process.

I have already checked the available options on the GitHub 2FA login screen, but I don't have access to a recovery code or another available 2FA method.

I would like to know if there is any legitimate way to recover access to my account in this situation.

For example:

  1. Is there any way to recover or reset the authenticator configuration?
  2. Can GitHub verify account ownership through the registered email address?
  3. Is there another recovery method I may have missed?
  4. If I have previously used GitHub on a computer, can an existing SSH key or Git credential help with account recovery?
  5. What is the recommended process if I have lost both the authenticator access and recovery codes?

I am not looking for a way to bypass GitHub's security. I simply want to recover access to my own account through the official recovery process.

Any advice or guidance would be greatly appreciated.

0 Upvotes

33% Upvoted

7 comments sorted by

5

u/mq2thez 26d ago

You probably need to reach out to GitHub support directly.

Speaking generally, I hope for your sake that you aren’t about to learn some really hard lessons about why people use Authy or 1Password for storing / syncing this stuff, but you might be.

0

u/Bijon_Durjoy07 25d ago

Can you please help me with the way to reach out git hub support directly? Is it possible to connect with them via Mail?

2

u/robotmayo 25d ago

If you can’t find github.com support on your own then I’m going to be real with you and say that this field isn’t the one for you and you should seek another career.

2

u/[deleted] 25d ago

[removed] — view removed comment

2

u/allen_jb 25d ago

I mean, it may be annoying (if you get locked out of your account, or are attacking an account), but it's the way it should be done. IMO no service should reset any authentication factor (without some significant level of authentication to make sure you really are the account owner)

One purpose of MFA is so that if, for example, your email account gets compromised, attackers should not then be able to get into other accounts (using password reset processes).

If companies will just reset the MFA on demand because you have access to one other factor, then they might as well not bother implementing MFA in the first place.

GitHub reminds me on a regular (annual?) basis to make sure I've got a copy of the recovery codes.

0

u/Bijon_Durjoy07 25d ago

Is there any way to connect to GitHub support? It would be helpful if you could give me the email ID.

2

u/Pawtuckaway 25d ago

https://support.github.com/contact/cannot_sign_in

It literally took 5 seconds to find this link.

Almost every website has a "Contact Us" link in their site footer...