GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

IoT News: WBA and FIDO test zero-touch IoT Wi-Fi onboarding

Industrial operators can automate IoT onboarding across Wi-Fi networks through a joint specification from the Wireless…

Read More →

Tech Times: Visa Payment Passkey Goes Live at Five India State Banks: OTP Attack Surface Eliminated

India’s five-decade-old authentication habit — waiting for a six-digit code on a phone — got…

Read More →

FinTech Futures: Sibos 2026: Digital finance in an AI-driven economy – when the agent does the buying, who owns the customer?

By shaping the standards of identity, control, and compliance today, financial institutions can ensure they…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.