If you use Google or GitHub OAuth, there is no two-factor authentication section because you are not using a username and password on your DigitalOcean account. Then, in the Two-factor authentication section, click Set Up 2FA. In the menu that opens, click My Account to go to your My Account page. To enable 2FA for your DigitalOcean account, log in to the control panel and click the profile icon in the top right corner. This isn’t as effective as 2FA, but it increases the difficulty for would-be attackers and provides you with notification if someone is trying to access your account. This means that even without 2FA enabled, a bad actor would need both your DigitalOcean password and your email password to log in. You’ll need to check your email, retrieve the code, and enter it to complete your login. When you first create your account, 2FA is disabled, but DigitalOcean takes other steps to protect your account.Įach time you log in from a new location using a new device or a different web browser, we email an authorization code to the address linked to your account. We do not currently support hardware keys like YubiKey. You can receive the code via SMS or an authenticator app on your smartphone.

Two-factor authentication, commonly abbreviated as 2FA, is any form of verification that requires two factors, like withdrawing money from an ATM using both a bank card and its PIN.ĭigitalOcean supports 2FA for accounts in the form of a security code that you use in addition to your password when you log in. What is Two-Factor Authentication?Īn authentication factor is a piece of information used to verify that you’re allowed to do something, like a keycard used to unlock a hotel door. Our default account authorization protects accounts without 2FA enabled, but not as effectively as using 2FA itself. We strongly recommend enabling 2FA on all DigitalOcean accounts.

Even if a bad actor gains access to your password, they still can’t access your DigitalOcean without also having your phone. Using two-factor authentical (2FA) on DigitalOcean adds an additional layer of security against unauthorized access to your account.

Google authenticator yubikey