Services / Developer tools / npm
npm
Developer tools · npmjs.com
One second factor on offer: security key.
Recommended setup
Security key + code backup
A security key only answers the real site, so it can't be phished. Set up a second method too, so a lost key doesn't lock you out.
KeySecurity keyOnly option
Not offered: authenticator app, approval in an app, hardware token, text message, phone call, email code.
Switch it on
General steps; menu names vary. npm's own guide has the exact screens.
- Sign in to npm and open your account's security settings. Look for two-step verification or two-factor authentication. npm's own guide shows the exact screens.
- Add your email address and enter the code npm sends, to confirm it.
- Choose security key. Insert a USB key, or hold an NFC key to your phone, and touch it when it blinks. Register a spare key too.
- Save the backup codes. Keep them in your password manager or print them; they're your way back in if you lose your phone or key.