Question

A developer at your company enabled two-factor authentication (2FA) on their GitHub account using an authenticator app on their phone. Their phone was lost and they can no longer generate time-based codes. They did not configure a security key or SMS fallback. What is the intended way for them to regain access to their account?

Accepted Answer

Use one of the recovery codes that GitHub provided when 2FA was first configured

Answer

Ask an organization owner to disable 2FA on the developer's personal account from the org settings

Answer

Wait 24 hours for GitHub to automatically bypass 2FA on the account

Answer

Sign in with only the username and password, since 2FA is optional after the first login