GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.
-
About The AllianceAlliance MembershipSpecifications
-
FIDO User Authentication
-
FIDO Device Onboard
-
FIDO CertificationsFind Certified ProductsFIDO Accredited LaboratoriesAdministrative
-
Discover FIDO
-
Latest Updates
More FIDO in the News
Fast Company: Google made its employees impervious to phishing using USB security keys
None of Google’s 85,000+ have fallen prey to phishing attacks on their work-related accounts since…
CNET: A physical key is the secret to Google employees’ online security
CNET explains that the FIDO Security Key is the secret to Google’s employees’ online security.
Krebs on Security: Google: Security Keys Neutralized Employee Phishing
Well-known cybersecurity expert and influencer Brian Krebs breaks down how FIDO Authentication using Security Keys…
