Device verification protects new sessions if you don’t have two-factor authentication enabled, using an email notification. We’ve updated this feature to allow you to verify your sign in using GitHub Mobile. Device verification will by default use GitHub Mobile notifications. However, you can still request an email notification if your phone is unavailable.
For more information, read about “Authenticating in your browser.”