tarekziade
commented
10 months ago Would it be possible to implement a password reset process for users that are locked out of their 2FA with recovery codes lost? Right now the manual recovery process takes several months which can be problematic if you need to update a package that has a security issue.
GH uses SSH keys, or previously used devices techniques, see https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/recovering-your-account-if-you-lose-your-2fa-credentials#requesting-help-with-two-factor-authentication
Happy to help implementing something, or contributing in any way Thanks
ewdurbin
di
This is a meta-issue for the rollout for https://blog.pypi.org/posts/2023-06-01-2fa-enforcement-for-upload/, in rough order of priority:
Previously identified items. Evaluate whether implementation is still necessary.
Other things