GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.
More FIDO in the News
What is a passkey? Why Apple is betting on password-free tech
The digital realm has long struggled with the vulnerabilities inherent in password-based authentication systems. With…
The Register: AWS is pushing ahead with MFA for privileged accounts. What that means for you.
AWS is making multi-factor authentication (MFA) mandatory for privileged users, specifically management account root users…
IT Brew: FIDO Alliance announces identity-proofing certification
FIDO’s Face Verification Certification tests for security, liveness, and bias in remote identity verification technology…
