Enabling Two-Factor Authentication

Two-factor authentication (2FA) provides users with additional authentication security, by requiring a token retrieved via your cell phone in addition to a password. Code Climate highly recommends 2FA for all users.

📘

Though 2FA must be enabled at the user-level, organization owners can view which members of their team have (and have not) enabled 2FA from their organization's Team Members page.

📘

If your Code Climate user is GitHub-linked and you don't have a password, you'll need to create a password before moving forward. This can be done by logging out of Code Climate, and choosing the "Forgot Password?" workflow to create a password.

Show Me How

1. From your Dashboard, click your avatar in the top-right corner of the page.

2. Scroll to the bottom, and click Enable Two-Factor Authentication.

3. Enter your cell phone number, including area code, into the Cell Phone field.
4. Select your country code from the Country list.
5. Click Enable Two-Factor Authentication.

🚧

Code Climate uses Authy for two-factor authentication. To use two-factor authentication to login to your Code Climate account you will need to install and setup the Authy app on your device (e.g, your iOS or Andorid phone). More information on how to do this can be found on the Authy website.

We currently don't support 2FA via 1Password or Google Authenticator.

6. A green message will appear indicating 2FA has been enabled for your user. If a red error message is displayed, see Troubleshooting below.

Signing In with 2FA

1. After enabling 2FA, upon signing in you will receive a prompt for your Code Climate token.

   If you would prefer to receive your token via SMS instead of via the Authy app, click the Request token via SMS and Authy will send it via a text message.

2. A notification from the Authy app should appear on your mobile device with your Code Climate token.

3. Back in Code Climate, enter the token in the Token field, and click Verify Token.

4. Upon successful login, you will be redirected to your Dashboard.

Troubleshooting

If you are seeing a red error message after clicking Enable Two-Factor Authentication:

• Ensure there are no leading or trailing spaces around your cell phone number.
• Ensure there are no characters in the Cell Phone field (e.g., dashes or parentheses).