Two-factor authentication
Also called 2FA, two-step verification.
In plain English
Two-factor authenticationAuthentication checks that a person, application, or service is the identity it claims to be. asks for a second proof, like a code from your phone, in addition to your password.
Example
You sign in with your password, then type the six-digit code your authenticator app shows.
Why it matters
GitHub's docs describe two-factor authenticationAuthentication checks that a person, application, or service is the identity it claims to be. as an extra layer of security used when you sign in. After your password, you also give a code from an app, a security key, or another method. Someone who steals only your password still cannot get in.
How it shows up on bot.ski
Never share a 2FA code with anyone, including a bot. Turning on 2FA for the accounts you connect to a bot adds a layer of protection.
Common confusion
2FA protects signing in. It does not decide what an account may do once it is signed in. That is authorizationAuthorization decides what an identified user or system is allowed to access or do..
Sources
Updated October 11, 2026.