GitHub to roll out 2FA for all contributors starting March 13

March 10, 2023 – Published on SC Magazine

GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13.  

The step comes under a plan announced last May to make 2FA mandatory for all contributors by the end of 2023. If successful, the requirement could help to better secure the accounts of over 100 million users, protecting them from software supply chain attacks and other threats levied at the platform.  

Timothy De Block, application security engineering practice lead at GuidePoint Security, added that SMS also adds a measure of convenience, particularly regarding account recovery.  

“If a phone is lost, wiped, or dropped in the toilet, the authentication app is no longer synced with the authentication mechanism of their account. And if users do not have backup codes, it will be difficult to recover the account. But with SMS, they just need to get a new phone with the same number,” said Block. 

Read More HERE.