Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/microsoft/Git-Credential-Manager-for-Windows

Secure Git credential storage for Windows with support for Visual Studio Team Services, GitHub, and Bitbucket multi-factor authentication.
https://github.com/microsoft/Git-Credential-Manager-for-Windows

authentication bitbucket credential-storage git github multi-factor-authentication tfs visual-studio visual-studio-code visual-studio-team-services windows

Last synced: about 1 month ago
JSON representation

Secure Git credential storage for Windows with support for Visual Studio Team Services, GitHub, and Bitbucket multi-factor authentication.

Awesome Lists containing this project

README 

        
# Git Credential Manager for Windows



[![GitHub Release](https://img.shields.io/github/release/microsoft/git-credential-manager-for-windows.svg?style=flat-square)](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/releases)

[![Build status](https://img.shields.io/appveyor/ci/whoisj/git-credential-manager-for-windows.svg?style=flat-square)](https://ci.appveyor.com/project/whoisj/git-credential-manager-for-windows/branch/master)

[![Coverity Scan Build Status](https://img.shields.io/coverity/scan/11371.svg?style=flat-square)](https://scan.coverity.com/projects/git-credential-manager-for-windows)

[![GitHub Downloads](https://img.shields.io/github/downloads/Microsoft/Git-Credential-Manager-for-Windows/total.svg?style=flat-square)](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/releases)

[![@MicrosoftGit on Twitter](https://img.shields.io/twitter/follow/microsoftgit.svg?style=social&label=Follow%20%40microsoftgit)](https://twitter.com/microsoftgit)



* * *



## NOTICE: This project is no longer being maintained. :warning:



Git Credential Manager for Windows is no longer being maintained. The cross-platform

[Git Credential Manager Core (GCM Core)](https://aka.ms/gcmcore) is the official replacement.



GCM Core is included as an optional component of Git for Windows 2.28 and will be made the default credential

helper as of Git for Windows 2.29. GCM Core can also be manually installed from [this page](https://github.com/microsoft/Git-Credential-Manager-Core/releases/latest).



* * *



## NOTICE: Experiencing GitHub push/fetch problems?



[GitHub will disable password-based authentication](https://github.blog/changelog/2019-08-08-password-based-http-basic-authentication-deprecation-and-removal/)

on APIs Git Credential Manager for Windows uses to create tokens. As a result, GCM

for Windows will no longer be able to create new access tokens for GitHub.



[Git Credential Manager Core (GCM Core)](https://aka.ms/gcmcore) supports OAuth-based

authentication with GitHub and is the replacement for GCM for Windows.



Please update to Git for Windows 2.28 and select "Git Credential Manager Core" from

the installer when asked to "select a credential helper", or manually install GCM Core

from [here](https://github.com/microsoft/Git-Credential-Manager-Core/releases/latest).



---



As of 22 Feb 2018, [GitHub has disabled support for weak encryption](https://githubengineering.com/crypto-deprecation-notice/) which means many users will suddenly find themselves unable to authenticate using a Git for Windows which (impacts versions older than v2.16.0). **DO NOT PANIC**, there's a fix. [Update Git for Windows](https://github.com/git-for-windows/git/releases) to the latest (or at least v2.16.0).



The most common error users see looks like:



```text

fatal: HttpRequestException encountered.

   An error occurred while sending the request.

fatal: HttpRequestException encountered.

   An error occurred while sending the request.

Username for 'https://github.com':

```



If, after updating Git for Windows, you are still having problems authenticating with GitHub, please read this [Developer Community](https://developercommunity.visualstudio.com/content/problem/201457/unable-to-connect-to-github-due-to-tls-12-only-cha.html) topic which contains additional remedial actions you can take to resolve the problem.



If you are experiencing issue when using **Visual Studio**, please read **[Unable to connect to GitHub with Visual Studio](https://developercommunity.visualstudio.com/content/problem/201457/unable-to-connect-to-github-due-to-tls-12-only-cha.html)**.



* * *



The [Git Credential Manager for Windows](https://github.com/Microsoft/Git-Credential-Manager-for-Windows) (GCM) provides secure Git credential storage for Windows. It's the successor to the [Windows Credential Store for Git](https://gitcredentialstore.codeplex.com/) (git-credential-winstore), which is no longer maintained. Compared to Git's built-in credential storage for Windows ([wincred](https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage)), which provides single-factor authentication support working on any HTTP enabled Git repository, GCM provides multi-factor authentication support for [Azure DevOps](https://dev.azure.com/), [Team Foundation Server](Docs/Faq.md#q-i-thought-microsoft-was-maintaining-this-why-does-the-gcm-not-work-as-expected-with-tfs), GitHub, and Bitbucket.



This project includes:



* Secure password storage in the Windows Credential Store.

* Multi-factor authentication support for Azure DevOps.

* Two-factor authentication support for GitHub.

* Two-factor authentication support for Bitbucket.

* Personal Access Token generation and usage support for Azure DevOps, GitHub, and Bitbucket.

* Non-interactive mode support for Azure DevOps backed by Azure Directory.

* NTLM/Kerberos authentication for Team Foundation Server ([see notes](Docs/Faq.md#q-i-thought-microsoft-was-maintaining-this-why-does-the-gcm-not-work-as-expected-with-tfs)).

* Optional settings for [build agent optimization](Docs/Automation.md).



## Community



This is a community project so feel free to contribute ideas, submit bugs, fix bugs, or code new features. For detailed information on how the GCM works go to the [wiki](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/wiki/How-the-Git-Credential-Managers-works).



## Download and Install



To use the GCM, you can download the [latest installer](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/releases/latest). To install, double-click `GCMW-{version}.exe` and follow the instructions presented.



When prompted to select your terminal emulator for Git Bash you should choose the Windows' default console window, or make sure GCM is [configured to use modal dialogs](Docs/Configuration.md#modalprompt). GCM cannot prompt you for credentials, at the console, in a MinTTY setup.



### Manual Installation



Note for users with special installation needs, you can still extract the `gcm-{version}.zip` file and run install.cmd from an administrator command prompt. This allows specification of the installation options explained below.



### Installation in an MSYS2 Environment



To use the GCM along with git installed with `pacman` in an MSYS2 environment, simply [download a release zip](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/releases) and extract the contents directly into `C:\msys64\usr\lib\git-core` (assuming your MSYS2 environment is installed in `C:\msys64`). Then run:



```shell

git config --global credential.helper manager

```



## How to use



You don't. It [magically](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/issues/31) works when credentials are needed. For example, when pushing to [Azure DevOps](https://dev.azure.com), it automatically opens a window and initializes an oauth2 flow to get your token.



### Build and Install from Sources



To build and install the GCM yourself, clone the sources, open the solution file in Visual Studio, and build the solution. All necessary components will be copied from the build output locations into a `.\Deploy` folder at the root of the solution. From an elevated command prompt in the `.\Deploy` folder issue the following command `git-credential-manager install`. Additional information about [development and debugging](Docs/Development.md) are available in our documents area.



[Various options](Docs/Configuration.md) are available for uniquely configured systems, like automated build systems. For systems with a **non-standard placement of Git** use the `--path ` parameter to supply where Git is located and thus where the GCM should be deployed to. For systems looking to **avoid checking for the Microsoft .NET Framework** and other similar prerequisites use the `--force` option. For systems looking for **silent installation without any prompts**, use the `--passive` option.



### Additional Resources



* [Credential Manager Usage](Docs/CredentialManager.md)

* [Askpass Usage](Docs/Askpass.md)

* [Configuration Options](Docs/Configuration.md)

* [Build Agent and Automation Support](Docs/Automation.md)

* [Bitbucket Specific Details](Docs/Bitbucket.md)

* [Frequently Asked Questions](Docs/Faq.md)

* [Development and Debugging](Docs/Development.md)



## Contribute



There are many ways to contribute.



* [Submit bugs](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/issues) and help us verify fixes as they are checked in.

* Review [code changes](https://github.com/Microsoft/Git-Credential-Manager-for-Windows/pulls).

* Contribute bug fixes and features.



### Code Contributions



For code contributions, you will need to complete a Contributor License Agreement (CLA). Briefly, this agreement testifies that you grant us permission to use the submitted change according to the terms of the project's license, and that the work being submitted is under the appropriate copyright.



Please submit a Contributor License Agreement (CLA) before submitting a pull request. You may visit  to sign digitally. Alternatively, download the agreement [Microsoft Contribution License Agreement.pdf](https://cla.microsoft.com/cladoc/microsoft-contribution-license-agreement.pdf), sign, scan, and email it back to . Be sure to include your GitHub user name along with the agreement. Once we have received the signed CLA, we'll review the request.



## Code of Conduct



This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact  with any additional questions or comments.



## License



This project uses the [MIT License](LICENSE.txt).