PyPI has been on the path of making Two-factor Authentication a reality for PyPI, which began in 2019.

Read more about some of the steps taken in recent months on the PyPI Blog:

- https://blog.pypi.org/posts/2023-05-25-securing-pypi-with-2fa/

- https://blog.pypi.org/posts/2023-06-01-2fa-enforcement-for-upload/

- https://blog.pypi.org/posts/2023-08-08-2fa-enforcement-for-new-users/

- https://blog.pypi.org/posts/2023-12-06-2fa-enforcement-on-testpypi/

PyPI Admins will activate the requirement for PyPI.org on Jan 1, 2024 for all users, all projects.

(If we're off by a few hours in any direction, our apologies. Exact timing is not yet available.)

Read more in the Help section.

If you are no longer responsible for a PyPI account that publishes packages, please forward details along to someone who does, so they are not caught unaware.

All the best,

-Mike Fiedler, PyPI Safety & Security Engineer