SMS Backup Deprecation

Change effective on 29 April 2021

Heroku is deprecating the use of SMS as a backup option or verification method for 2FA and MFA for all users at the end of November 2021.

Legacy Heroku two-factor authentication (2FA) configuration encouraged users to add SMS as a backup. Users with legacy 2FA SMS backups were automatically migrated to new Heroku Multi-Factor Authentication (MFA) and with their SMS as a MFA verification method.

These migrated SMS verifiers will be removed on November 30, 2021. Users will not be able to use SMS as a verification method after that date.

Users should ensure that they have another MFA verification method such as recovery codes configured as backup if your usual MFA verification method is not available

No action is required for users who do not have an SMS verifier enabled.