GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

The Conversation: The age of hacking brings a return to the physical key

The Conversation explains how the FIDO standards can bolster security for access to online accounts.

Read More →

Secure ID News: Merging FIDO and PIV could help Feds achieve strong authentication goals

This story from Secure ID News covers a recent FIDO Alliance white paper that outlines…

Read More →

FindBiometrics: FIDO Heralds Increasing Prominence of its Standards in Mobile Sector

In this article, FindBometrics reports on how the FIDO Alliance is heralding the increasing prominence…

Read More →