GitHub Locked Out: Lost 2FA Device or Recovery Codes

How to fix it

Try these in order — the most common fix is first.

1. 1. Use a saved recovery code

   Copy steps
   1. On the 2FA screen choose More options > Use a recovery code
   2. Enter one code from your saved file, often named github-recovery-codes.txt
   3. After signing in, generate a fresh set under Settings > Password and authentication
   Did this fix it? Yes No

2. 2. Use a passkey

   Copy steps
   1. If you registered a passkey on another device or password manager, use it at sign in
   2. A passkey satisfies both the password and 2FA
   Did this fix it? Yes No

3. 3. Start account recovery with an SSH key or token

   Copy steps
   1. On the 2FA prompt choose the account recovery option and Begin account or email recovery
   2. Enter the one-time password sent to a verified email
   3. Choose a verification factor: an SSH key or personal access token already on the account (SSH keys can be removed after long inactivity)
   4. Support reviews within about three business days; your old credentials still work in the meantime
   Did this fix it? Yes No

4. 4. If you have no password

   Copy steps
   1. Request a password reset email; the link expires after 3 hours
   2. Then begin the recovery flow
   Did this fix it? Yes No

5. 5. If every method is gone

   Copy steps
   1. GitHub Support cannot restore the account
   2. You can unlink the email from the locked account and create a new one
   Did this fix it? Yes No

Symptoms

You cannot get past the two-factor prompt because the phone, authenticator app or security key is gone.

Why it happens

• Authenticator app lost with the phone
• Recovery codes were never downloaded or saved
• Security key or passkey is not available on the new device

This guide also covers

• github lost 2fa
• github recovery codes
• github locked out two factor
• github 2fa not working

Other GitHub errors

• GitHub Permission Denied (publickey) Error
• GitHub 'Password Authentication Was Removed' Error
• GitHub Push Rejected: Updates Were Rejected (Non-Fast-Forward)
• GitHub Push Blocked: Repository Rule Violations (GH013 / Secret Detected)
• GitHub Push Rejected: File Exceeds 100 MB Limit
• GitHub 'Permission Denied' or 403 When Pushing Over HTTPS
• GitHub Actions Workflow Stuck in Queued / Waiting for a Runner
• GitHub Actions: 'Recent Account Payments Have Failed or Spending Limit Needs to Be Increased'