Rullst AcademyRullst Academy/Lesson
GitHub: your first account · Lesson 04 / 06

A second key and a way back

The account deserves protection before the first project. Prepare a recovery route too.

Learning paths8 min

Let's discover together

  1. 1

    On GitHub, open your profile picture → Settings → Password and authentication. Under Two-factor authentication, follow Enable two-factor authentication to configure an available method. Labels may appear in English.

  2. 2

    For the authenticator-app route, configure the app and confirm its code on the official screen. QR codes and setup keys are secrets; do not publish screenshots or send them to classmates.

  3. 3

    Store recovery codes in a safe place accessible if you lose the device. Follow the steps until GitHub confirms 2FA is active. Never approve a sign-in you did not initiate.

  4. 4

    GitHub also supports passkeys. They can let you sign in without typing a password and satisfy two-factor verification. Check compatibility, register only on devices you control and keep recovery available independently of a device you might lose. This exercise does not require buying a physical key.

FROM LESSON TO PRACTICE

A guide to follow at your pace

Read the steps before using the reference below. Commands run in the indicated system’s terminal; signup happens on the official site. Rullst Academy exercises are practice and do not verify your installation or external account.

2FA: configure on GitHub
setup_QR: secret
recovery_codes: protected storage
project_files: no secrets

Official links and next step

✦
YOUR MISSION

Recognize that the setup QR is secret and choose a recovery plan for a lost phone.

Now it's your turn

Discovery workshop

A second key and a way back

Lua considers putting a QR-code screenshot in a repository “so it won’t get lost”. Lua also wants access to recovery codes if the phone stops working.
Build your answers and check when you are ready.
A moment to understand

Does setting up 2FA remove the need to be careful with messages?

I need a hint

Protection layers help but do not make every request trustworthy.

Loading your journey…

Take it with you

Describe a fictional recovery plan without writing secrets.

At your own pace

My files and GitHub

Every lesson can become your own record: code, notes or a practice plan. Saving a file to GitHub is optional and does not change your XP.

Student guide

The editor and downloads open when this lesson is available to your account. Check access below or return to the track map.

Checking your access to this lesson…

Rullstpetbot

AI can make mistakes. Check the lesson material.