Can we enable two factor auth for a specific repo or only account wide?

[Ergin Dervisoglu]

We have a repository that has some sensitive info in it and we are wondering if it's possible to enable two step verification for just this specific repo instead of account wide?  

Also, if I enable two step auth for my account can you confirm this will not affect any other users have access to our BitBucket repos?  

Thanks,

-Ergin

[Ana Retamal · Accepted solution]

Hi Ergin, welcome to the Community!

At the moment that is not possible, 2 step verification can not be added on a per-repository basis. Also, note that two-step verification will provide an extra security layer in order to access your account, but if any other users have permissions to access your account, they won't be affected.If you'd like that every user with access to that repo uses two-step verification, you'll need to upgrade to Premium and use Access controls. 

Access controls give you the ability to make sure users meet certain requirements before accessing your private repositories, wikis, issue trackers, and team admin pages. The access controls we currently have include:

• Requiring two-step verification—Require that the users who can access your private content are only able to view or interact with that content if they've enabled two-step verification.
• Whitelisting IP addresses—Restrict access of your private content to users on certain IP addresses.

You can learn more about it at Bitbucket Cloud Premium plan.

Hope that helps you, Ergin. If you have any questions, please don't hesitate to let us know.

Best regards,

Ana

[Ergin Dervisoglu]

Ok got it, would be great if your product teams can consider this request for future releases (ie ability to configure 2-factor auth) on a per repo basis.  

In any case thanks for the answer Ana. 

--Ergin

[Ana Retamal]

Hi Ergin, following your proposal I submitted a Feature request, you can add a comment or vote for it at https://bitbucket.org/site/master/issues/19291/ability-to-configure-two-step-verification.

For the future remember that you can also request your ideas, you can do it through the same portal.

Hope that helps!

Ana