Services / Developer tools / PyPI

PyPI

Developer tools · pypi.org

Two second factors on offer: security key and authenticator app. The strongest is a security key.

Recommended setup

Security key + app backup

A security key only answers the real site, so it can't be phished. Set up a second method too, so a lost key doesn't lock you out.

KeySecurity keyBest option
AppAuthenticator appSupported

Not offered: approval in an app, hardware token, text message, phone call, email code.

Switch it on

General steps; menu names vary. PyPI's own guide has the exact screens.

  1. Sign in to PyPI and open your account's security settings. Look for two-step verification or two-factor authentication. PyPI's own guide shows the exact screens.
  2. Choose authenticator app. A QR code appears.
  3. Open your authenticator app, add an account and scan the QR code. Type the 6-digit code it shows to confirm.
  4. Choose security key. Insert a USB key, or hold an NFC key to your phone, and touch it when it blinks. Register a spare key too.
  5. Save the backup codes. Keep them in your password manager or print them; they're your way back in if you lose your phone or key.
PyPI's setup guide ↗