GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

Ars Technica: Coming to Apple OSes: A seamless, secure way to import and export passkeys

Apple this week provided a glimpse into a feature that solves one of the biggest…

Read More →

MobileIDWorld: Apple Introduces Cross-Platform Passkey Import/Export Features Across Operating Systems

Apple has announced significant enhancements to its operating systems that will implement secure import and…

Read More →

Techopedia: FIDO2 & Passkeys: The Future of Passwordless Authentication

Passwordless authentication has picked up in recent years. But the method drawing the most interest in…

Read More →