Two-factor authentication

The nf-core GitHub organisation requires two-factor authentication (2FA) for all members and outside collaborators. 2FA adds a second verification step when you sign in to GitHub, which protects nf-core repositories if your password is compromised.

Who needs to act

What you need to do depends on your relationship with the nf-core GitHub organisation:

Enable two-factor authentication

GitHub supports several 2FA methods, including authenticator apps, security keys, passkeys, and GitHub Mobile. Choose the method you prefer and follow the GitHub instructions to configure two-factor authentication.

Join the nf-core GitHub organisation

Outside collaborators are people with access to an nf-core repository who are not members of the nf-core GitHub organisation. If you are an outside collaborator, request an invitation to the organisation in the #github-invitations Slack channel. See Join nf-core for more information.

What happens if you do not enable 2FA

The consequences of not enabling 2FA differ for members and outside collaborators:

• Members stay in the nf-core GitHub organisation, but cannot access organisation resources until they enable 2FA. This means you can no longer commit to, review, or merge pull requests in nf-core repositories.
• Outside collaborators are removed from the organisation and lose access to all nf-core repositories.

See Requiring two-factor authentication in your organization for details on how GitHub applies this requirement.