Skip to content

Latest commit

 

History

History
77 lines (58 loc) · 5.08 KB

updating-your-github-access-credentials.md

File metadata and controls

77 lines (58 loc) · 5.08 KB
title intro redirect_from versions topics shortTitle
Updating your GitHub access credentials
{% data variables.product.github %} credentials include not only your password, but also the access tokens, SSH keys, and application API tokens you use to communicate with {% data variables.product.github %}. Should you have the need, you can reset all of these access credentials yourself.
/articles/rolling-your-credentials
/articles/how-can-i-reset-my-password
/articles/updating-your-github-access-credentials
/github/authenticating-to-github/updating-your-github-access-credentials
/github/authenticating-to-github/keeping-your-account-and-data-secure/updating-your-github-access-credentials
fpt ghes ghec
*
*
*
Identity
Access management
Update access credentials

{% ifversion ghec %}

[!NOTE] {% data reusables.enterprise-data-residency.access-domain %}

{% endif %}

Requesting a new password

{% data reusables.accounts.request-password-reset-link %}

  1. If you have enabled two-factor authentication, you will be prompted for your 2FA credentials: {% ifversion fpt or ghec %}
    • If you have {% data variables.product.prodname_mobile %}, you will be sent a push notification to verify your identity. Open the push notification or the {% data variables.product.prodname_mobile %} app and enter the two-digit code shown to you on the password reset page in your browser.
      • To skip using {% data variables.product.prodname_mobile %} to verify, click Enter two-factor authentication or recovery code. {% endif %}
    • Type your authentication code or one of your recovery codes and click Verify.
      • If you have added a security key to your account, click Use security key instead of typing an authentication code. {% ifversion fpt or ghec %}
      • If you have set up {% data variables.product.prodname_mobile %}, click Authenticate with {% data variables.product.prodname_mobile %} instead. {% endif %} {% ifversion 2fa-recovery-flow %}
      • If you've lost access to your two-factor authentication credentials and your recovery codes, you can start account recovery request. See AUTOTITLE. {% endif %}
  2. In the text field under Password, type a new password. Then, in the text field under Confirm password, type the password again.
  3. Click Change password. For help creating a strong password, see AUTOTITLE.

Tip

To avoid losing your password in the future, we suggest using a secure password manager.

Changing an existing password

{% data reusables.repositories.blocked-passwords %}

  1. Sign in to {% data variables.product.github %}. {% data reusables.user-settings.access_settings %} {% data reusables.user-settings.security %}
  2. Under "Change password", type your old password, a strong new password, and confirm your new password. For help creating a strong password, see AUTOTITLE.
  3. Click Update password.

Tip

For greater security, enable two-factor authentication in addition to changing your password. See About two-factor authentication for more details.

Updating your access tokens

See AUTOTITLE for instructions on reviewing and deleting access tokens. To generate new access tokens, see AUTOTITLE.

If you have reset your account password and would also like to trigger a sign-out from the {% data variables.product.prodname_mobile %} app, you can revoke your authorization of the "GitHub iOS" or "GitHub Android" {% data variables.product.prodname_oauth_app %}. This will sign out all instances of the {% data variables.product.prodname_mobile %} app associated with your account. For additional information, see AUTOTITLE.

Updating your SSH keys

See AUTOTITLE for instructions on reviewing and deleting SSH keys. To generate and add new SSH keys, see AUTOTITLE.

Resetting API tokens

If you have any applications registered with {% data variables.product.github %}, you'll want to reset their OAuth tokens. For more information, see the PATCH /applications/{client_id}/token endpoint in AUTOTITLE.

Preventing unauthorized access

For more tips on securing your account and preventing unauthorized access, see AUTOTITLE.