Enhance 2FA recovery methods documentation (#58986)

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com>

Author: 3 people

content/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication-recovery-methods.md

@@ -20,7 +20,13 @@ shortTitle: Configure 2FA recovery
 ---
 In addition to securely storing your two-factor authentication (2FA) recovery codes, we strongly recommend configuring two or more authentication methods to avoid losing access to your account. For more information, see [AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication#configuring-two-factor-authentication-using-a-security-key).
 
-## Downloading your two-factor authentication recovery codes
+As well as configuring authentication methods, we'd also strongly suggest setting up some 2FA recovery methods which may be helpful if you were ever to lose your authentication methods. Recovery methods available to be configured include: the account's recovery codes file, SSH key(s), {% data variables.product.pat_generic_caps_plural %} (PATs) and verified device(s).
+
+## About the recovery codes file
+
+The recovery codes file includes one-time codes for account recovery if you can’t access your two-factor authentication method. You should download and store these codes securely.
+
+### Downloading your two-factor authentication recovery codes
 
 {% data reusables.two_fa.about-recovery-codes %} You can also download your recovery codes at any point after enabling two-factor authentication.
 
@@ -36,7 +42,7 @@ If you generate new recovery codes or disable and re-enable 2FA, the recovery co
     * To save a hard copy of your recovery codes, click **Print**.
     * To copy your recovery codes for storage in a password manager, click **Copy**.
 
-## Generating a new set of recovery codes
+### Generating a new set of recovery codes
 
 Once you use a recovery code to regain access to your account, it cannot be reused. If you've used all 16 recovery codes, you can generate another list of codes. Generating a new set of recovery codes will invalidate any codes you previously generated.
 
@@ -45,7 +51,7 @@ Once you use a recovery code to regain access to your account, it cannot be reus
 {% data reusables.two_fa.show-recovery-codes %}
 1. Under "Generate new recovery codes", click **Generate new recovery codes**.
 
-## Configuring backups for your time-based one-time password (TOTP) app
+### Configuring backups for your time-based one-time password (TOTP) app
 
 Most TOTP apps support backups. If you lose access to your authentication device, you can use your TOTP app backup to access your authentication method and account credentials on a different authentication device, ensuring continued access to your 2FA-enabled account.
 
@@ -55,6 +61,20 @@ The process of configuring backups is different for each TOTP app. For some exam
 * [Google Authenticator](https://security.googleblog.com/2023/04/google-authenticator-now-supports.html)
 * [Microsoft Authenticator](https://support.microsoft.com/en-us/account-billing/back-up-and-recover-account-credentials-in-the-authenticator-app-bb939936-7a8d-4e88-bc43-49bc1a700a40)
 
+## SSH keys
+
+SSH keys can be configured and used for account recovery if ever required. To set up 1 or more SSH keys that can be used to recover access to your 2FA-enabled account, see [AUTOTITLE](/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account).
+
+> [!NOTE]
+> Be sure to choose 'authentication' as the key's type during this process.
+
+## {% data variables.product.pat_generic_caps_plural %}
+
+{% data variables.product.pat_generic_caps_plural %} (PATs) can be configured and used for recovery if ever needed. To set up 1 or more PATs that can be used to recover access, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#creating-a-personal-access-token-classic).
+
+> [!NOTE]
+> Be sure to choose 'repo' when choosing the 'scopes' available during this process.
+
 ## Further reading
 
 * [AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/about-two-factor-authentication)