GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

The Guardian: RIP passwords: new web standard designed to replace login method

In this article, The Guardian’s Samuel Gibbs reports that “WebAuthn will eliminate need for passwords…

Read More →

Motherboard: Biometric and App Logins Will Soon Be Pushed Across the Web

In this article, FIDO Alliance Executive Director Brett McDowell tells Motherboard about WebAuthn, saying “What…

Read More →

The Verge: Chrome and Firefox will support a new standard for password-free logins

In his reporting on the newly announced FIDO2 Project, The Verge reporter Russell Brandon predicts…

Read More →