Skip to main content
All products
Organizations

This version of GitHub Enterprise was discontinued on 2023-07-06. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features, upgrade to the latest version of GitHub Enterprise. For help with the upgrade, contact GitHub Enterprise support.

Preparing to require two-factor authentication in your organization

Before requiring two-factor authentication (2FA), you can notify users about the upcoming change and verify who already uses 2FA.

We recommend that you notify organization members and outside collaborators at least one week before you require 2FA in your organization.

When you require use of two-factor authentication for your organization, members, outside collaborators, and billing managers (including bot accounts) who do not use 2FA will be removed from the organization and lose access to its repositories. They will also lose access to their forks of the organization's private repositories.

Before requiring 2FA in your organization, we recommend that you:

  • Enable 2FA on your personal account
  • Ask the people in your organization to set up 2FA for their accounts
  • See whether users in your organization have 2FA enabled
  • Warn users that once 2FA is enabled, those without 2FA are automatically removed from the organization