GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.
More FIDO in the News
The Hill: Securing government infrastructure with biometrics
This story from The Hill shares how open standards such as FIDO authentication can improve…
Biometric Update: FIDO Alliance showcases ecosystem of FIDO certified products
Biometric Update reports on the new FIDO Certified showcase, which provides deploying organizations with a…
CNET: Facebook now lets you lock down logins with a key
CNET reports that social media giant Facebook is now enabling users to lock down their…
