GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

Wall Street Journal: Tech that will Change Your Life in 2022

Analyzing industry trends and insights from industry experts, this piece offers predictions for tech in…

Read More →

The Green Sheet: Digital Commerce in 2022 – Part I

This article analyzes the four pillars of digital commerce—security, intelligence, agility and transparency—and their predicted…

Read More →

Daily Swig: Cybersecurity conferences 2022: A rundown of online, in person, and ‘hybrid’ events

An inclusion of Authenticate in October 2022: “Hosted by the FIDO Alliance, the event is…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.