Authentication documentation

If you upload an image or video to GitHub, the URL of the image or video will be modified so your information is not trackable.

You can securely access your account's resources by authenticating to GitHub, using different credentials depending on where you authenticate.

You can access an organization that uses single sign-on (SSO) by authenticating through an identity provider (IdP).

Using GPG, SSH, or S/MIME, you can sign tags and commits locally. These tags or commits are marked as verified on GitHub so other people can be confident that the changes come from a trusted source.

GitHub serves applications from multiple IP address ranges, which are available using the API.

Enable mandatory two-factor authentication to secure your account and maintain access to GitHub.com.

Passkeys allow you to sign in safely and easily, without requiring a password and two-factor authentication.

Using the SSH protocol, you can connect and authenticate to remote servers and services. With SSH keys, you can connect to GitHub without supplying your username and personal access token at each visit. You can also use an SSH key to sign commits.

Two-factor authentication (2FA) is an extra layer of security used when logging into websites or apps. With 2FA, you have to log in with your username and password and provide another form of authentication that only you know or have access to.