GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

WebProNews: WhatsApp Rolls Out Biometric Passkeys for Encrypted Chat Backups

WhatsApp has introduced passkey-encrypted chat backups using biometric authentication like Touch ID or Face ID,…

Read More →

Biometric Update: New benchmarking tool shows passkeys boost conversion success by 30%

FIDO Alliance and Liminal collaborate on utilization snapshot The FIDO Alliance, in collaboration with digital identity…

Read More →

Forbes: Cybersecurity Is A Digital Identity Problem And We Must Deal With It

Digital Identity Means Security One particular leaf of that nettle is authentication, and here I…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.