Help
cancel
Showing results for 
Search instead for 
Did you mean: 
Ground Controller Lvl 1
Message 1 of 18

Disable / Remove email "Device verification" prompt on login (not the 2FA)

Does anyone know how to this prompt? It's tiresome, and annoying to have to check inbox for "[GitHub] Please verify your device" email and copy / pasta verification code.

 

Also, the follow-up email "[GitHub] Please review this sign in" is worthless too. 

 

It's just un-needed to have the GitHub organizatino worry about my security especially since they already offer 2FA (which is already disabled). It's basically like you can not disable this silly feature. What a bad idea...

17 Replies
Moderator
Message 2 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

Hi @Vondelphia ,

 

Thanks for this feedback! We're always working to improve GitHub and the GitHub Community Forum, and we consider every suggestion we receive. I've logged your feature request in our internal feature request list. Though I can't guarantee anything or share a timeline for this, I can tell you that it's been shared with the appropriate teams for consideration.

 

Cheers!

Ground Controller Lvl 1
Message 3 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

+1. 

 

You already have other authentication mechanisms in place much more relevant to developpers (incl: SSH authentication), please stop wasting our time at (mostly) every login. Simple login is enough, and I can always enforce 2FA if I want added security.

 

I'm at a point where I consider moving my various projects to another git host just for this reason. Not a threat, just to give you an idea that shifting multiple small projects seems to me less time lost than verifying device so often.

Ground Controller Lvl 2
Message 4 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

this new function with the "device code" is incredibly bad. I am a normal user and create "issue" for Android Open Source apps. My account data is not valuable, nor interesting (if my account is hacked).

 

i just don't do bug reports anymore. your new method is incredibly annoying and once it happened to me that i didn't have my email address anymore and could never access my account again.

 

i have no desire to contact your github support. it hasn't caused any problems for years. i could create bug reports for the apps for years. now with their senseless security function. you have restricted the freedom.

 

i hate you for it. now i don't support android open source app anymore. don't create bug reports anymore. except the apps have an email contact.

 

then i contact them by email and report the bugs there. but never again github.com


i'm afraid since you were bought by microsoft. you're going to limit the platform more and more, create more and more fake security problems so that you have to do 2 factor (2FA) or something else e.g "device code"

 

you don't have any say at all if the users want such a function at all. you just introduced it that way.

 

you are nothing more than allowing the platform to be centrally managed and controlled. you are bad and I will never support you again.

Ground Controller Lvl 2
Message 5 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

I chose it exactly that way. I don't want 2FA or device code. I just want to login with my email/username and password. and then report bug reports. nothing more.

 

my login data is securely encrypted in my database. i have never asked for additional security on github.com or anything like that. you leave the users no choice.

 

just that they don't tell new users about this "device code" function at all. that they will be asked for it at the next login.

 

it shows again and again what they are. they are mutated to a central place.

the user doesn't have the decision anymore. they just decided to keep their lies about security alive. i hate you.

Ground Controller Lvl 2
Message 6 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

You should really try to prioritize this item - github has basically made it impossible to share private repos with others.  I created a second account for my organization to share demo material / code to other groups where I don't know their github usernames ahead of time (I provide them with my second account credentials, which has limited access).  The repos I want to allow others to access don't contain sensitive information, but I don't want them public either.  Now because of this verification non-sense, I cannot allow any access to others without knowing their github user names.  This may be a deal breaker for us...

Ground Controller Lvl 2
Message 7 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)


@BelHFL wrote:

 

I've logged your feature request in our internal feature request list.

 


 

What is the status of this? How low is this on your priority list? This is hell annoying!

Ground Controller Lvl 1
Message 8 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

Please disable this feature it's annoying

Ground Controller Lvl 1
Message 9 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)

For me, the "Device verification" is a show stooper.

I'am working on PCs of my custemers, where do not have acces to my e-mail account.

BTW: Its pointless to check devices only when connected over HTTP and to have it not, when manipulating the repository via push. Is this one of the greate ideas from the new github owner M$, trying to track developers? May be it is time to switch.

OT: why does this editor uses rich-text instead markdown (https://guides.github.com/features/mastering-markdown) which is common at github.

 

Ground Controller Lvl 1
Message 10 of 18

Re: Disable / Remove email "Device verification" prompt on login (not the 2FA)


@return42 wrote:

For me, the "Device verification" is a show stooper.

I'am working on PCs of my custemers, where do not have acces to my e-mail account.

BTW: Its pointless to check devices only when connected over HTTP and to have it not, when manipulating the repository via push. Is this one of the greate ideas from the new github owner M$, trying to track developers? May be it is time to switch.

OT: why does this editor uses rich-text instead markdown (https://guides.github.com/features/mastering-markdown) which is common at github.