This means that even without 2FA enabled, a bad actor would need both your DigitalOcean password and your email password to log in.

You’ll need to check your email, retrieve the code, and enter it to complete your login. When you first create your account, 2FA is disabled, but DigitalOcean takes other steps to protect your account.Įach time you log in from a new location using a new device or a different web browser, we email an authorization code to the address linked to your account. We do not currently support hardware keys like YubiKey. You can receive the code via SMS or an authenticator app on your smartphone. Two-factor authentication, commonly abbreviated as 2FA, is any form of verification that requires two factors, like withdrawing money from an ATM using both a bank card and its PIN.ĭigitalOcean supports 2FA for accounts in the form of a security code that you use in addition to your password when you log in. What is Two-Factor Authentication?Īn authentication factor is a piece of information used to verify that you’re allowed to do something, like a keycard used to unlock a hotel door. Our default account authorization protects accounts without 2FA enabled, but not as effectively as using 2FA itself. We strongly recommend enabling 2FA on all DigitalOcean accounts.

Even if a bad actor gains access to your password, they still can’t access your DigitalOcean without also having your phone. Using two-factor authentical (2FA) on DigitalOcean adds an additional layer of security against unauthorized access to your account.

1password 2fa setup