Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards

GitHub reaffirmed this week that it is testing passkeys from the FIDO Alliance industry association, which is developing “open standards that are more secure than passwords and SMS OTPs, simpler for consumers to use, and easier for service providers to deploy and manage.” Passkeys use public key cryptography standards to authenticate client devices that are protected using biometrics, such as smartphones, eliminating password-based authentication altogether.