2FA methods supported by Heroku
Adding two-factor authentication is one of the most effective ways to protect your Heroku account. With TOTP support, you can generate Heroku verification codes directly in the Authenticator App.
Authenticator app (TOTP)
Heroku lets you use time-based one-time passwords, so you can generate verification codes in an authenticator app on your device — no network or SMS needed.
Proprietary app
Heroku offers its own companion app for approving sign-ins.
Hardware token
Heroku supports a dedicated hardware token for generating codes.
Security key (U2F)
Heroku works with hardware security keys using the U2F/FIDO standard.
Heroku 2FA — Frequently asked questions
Does Heroku support an authenticator app?
Yes. Heroku supports time-based one-time passwords (TOTP), so you can add it to the Authenticator App and generate verification codes right on your device.
Which two-factor authentication methods does Heroku support?
Heroku currently supports: Authenticator app (TOTP), Proprietary app, Hardware token, Security key (U2F).
Is it free to generate Heroku codes with the Authenticator App?
Yes. The Authenticator App is free to download, and generating Heroku verification codes does not require an account or sign-up.
More Cloud services that support 2FA
This page is for educational purposes only. We are not affiliated with or endorsed by Heroku. All trademarks and product names are the property of their respective owners and are used solely for identification.