March 23, 2023

SC Media: GitHub to roll out 2FA for all contributors starting March 13

GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.

MORE FIDO in the News


Journal du Net: Digital accessibility: Why CIOs should make it a priority

In this byline, Andrew Shikiar explains how simple and safe...


L’Eclaireur FNAC: How password managers are preparing for a future … without passwords

Passwordless authentication has the potential to continue to grow in...


ComputerWeekly: Accessible authentication: What companies need to consider  

In this byline, Andrew Shikiar, executive director and CMO of...


Communications of the ACM: Passkeys unlock a new era for authentication

Until recently, replacing passwords has ranked somewhere between tricky and...