GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

VentureBeat: Hands-on with Google’s Titan Security Key, a $50 FIDO fob that secures your online accounts

VentureBeat reports that Google has launched its FIDO-based Titan Security Key for more secure user…

Read More →

TechRepublic: How to go beyond passwords in Windows 10

Windows 10 is moving towards more secure options for authentication — including support for the…

Read More →

ITPro Today: The Passwordless Authentication Future May Be Closer Than You Think

Microsoft Edge has joined Firefox and Chrome in adding support for the Web Authentication protocol,…

Read More →