2FA methods supported by npm
Adding two-factor authentication is one of the most effective ways to protect your npm account. With TOTP support, you can generate npm verification codes directly in the Authenticator App.
Authenticator app (TOTP)
npm lets you use time-based one-time passwords, so you can generate verification codes in an authenticator app on your device — no network or SMS needed.
Security key (U2F)
npm works with hardware security keys using the U2F/FIDO standard.
npm 2FA — Frequently asked questions
Does npm support an authenticator app?
Yes. npm supports time-based one-time passwords (TOTP), so you can add it to the Authenticator App and generate verification codes right on your device.
Which two-factor authentication methods does npm support?
npm currently supports: Authenticator app (TOTP), Security key (U2F).
Is it free to generate npm codes with the Authenticator App?
Yes. The Authenticator App is free to download, and generating npm verification codes does not require an account or sign-up.
More Developer services that support 2FA
This page is for educational purposes only. We are not affiliated with or endorsed by npm. All trademarks and product names are the property of their respective owners and are used solely for identification.