GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

The Hacker News: Microsoft Removes Password Management from Authenticator App Starting August 2025

Microsoft has said that it’s ending support for passwords in its Authenticator app starting August…

Read More →

PCmag: This Password Manager Now Lets You Create an Account Without a Password

Dashlane lets you open an account with a FIDO2-spec USB security key as your authentication.…

Read More →

ZDNET: Facebook’s new passkey support could soon let you ditch your password forever

For all of us who hate passwords, passkeys represent a simpler and safer way of authenticating online…

Read More →


123281 Next