U2F/2FA, how to enable it and enroll myself? #3308

New Issue

GiteaMirror · 2025-11-02T05:07:30-06:00

GiteaMirror commented

2025-11-02 05:07:30 -06:00

Originally created by @markg85 on GitHub (May 9, 2019).

Hi,

The documentation on this is really sparse!
I can only find some 'hint' that it even is possible in Gitea, but any documentation on how to enable it seems to be either completely missing or named so weirdly that you can't find it.

Some examples:
https://docs.gitea.io/en-us/authentication/ (makes no mention of it, at all!)
https://docs.gitea.io/en-us/ (mentions it in the features, but that's all)
https://github.com/go-gitea/gitea/blob/master/custom/conf/app.ini.sample (here calls it U2F but no documentation on how to use it)
In the user settings under security this is mentioned: "Your account must be enrolled in two-factor authentication to use security keys." but absolutely no way of figuring out how to enroll a user to use that.

I don't want to criticize Gitea, it's a marvelous project :)
But having some documentation on how to use this feature would be really welcome! I haven't figured it out yet.

Best regards,
Mark

Edit
Apparently on the security settings page (fur the user) there is a big ass button to enroll in 2FA right in the first section. I apparantly just didn't catch that at all at first. I only noticed it when watching this video about the feature: https://www.youtube.com/watch?v=sA4Id3Sc72M

Still leaves the above as valid, just not "as bad" as i thought it was.

Originally created by @markg85 on GitHub (May 9, 2019). Hi, The documentation on this is _really_ sparse! I can only find some 'hint' that it even is possible in Gitea, but any documentation on how to enable it seems to be either completely missing or named so weirdly that you can't find it. Some examples: https://docs.gitea.io/en-us/authentication/ (makes no mention of it, at all!) https://docs.gitea.io/en-us/ (mentions it in the features, but that's all) https://github.com/go-gitea/gitea/blob/master/custom/conf/app.ini.sample (here calls it U2F but no documentation on how to use it) In the user settings under security this is mentioned: "Your account must be enrolled in two-factor authentication to use security keys." but absolutely no way of figuring out how to enroll a user to use that. I don't want to criticize Gitea, it's a marvelous project :) But having some documentation on how to use this feature would be really welcome! I haven't figured it out yet. Best regards, Mark **Edit** Apparently on the security settings page (fur the user) there is a big ass button to enroll in 2FA right in the first section. I apparantly just didn't catch that at all at first. I only noticed it when watching this video about the feature: https://www.youtube.com/watch?v=sA4Id3Sc72M Still leaves the above as valid, just not "as bad" as i thought it was.

GiteaMirror added the issue/confirmed type/docs labels 2025-11-02 05:07:30 -06:00

GiteaMirror closed this issue

2025-11-02 05:07:31 -06:00

GiteaMirror commented

2025-11-02 05:07:32 -06:00

@arren-ru commented on GitHub (May 10, 2019):

The secret it that you don't really need anything to do with config to enable U2F. All default settings works.
The only condition is that you must have https between browser and server. U2F works only in this case.
Than go to settings/security and enable OTP, after that U2F become available.
OTP is required for avoid of self-locking out of your account in case of damaged or loose key (imho).

@arren-ru commented on GitHub (May 10, 2019): The secret it that you don't really need anything to do with config to enable U2F. All default settings works. The only condition is that you must have `https` between browser and server. U2F works only in this case. Than go to `settings/security` and enable OTP, after that U2F become available. OTP is required for avoid of self-locking out of your account in case of damaged or loose key (imho).

GiteaMirror commented

2025-11-02 05:07:32 -06:00

@stale[bot] commented on GitHub (Jul 10, 2019):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale[bot] commented on GitHub (Jul 10, 2019): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

GiteaMirror referenced this issue

2025-11-02 12:21:06 -06:00

[PR #3308] [MERGED] Templates for extra links in top navbar and repo tool tabs. #16874

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#3308