Just wondering what people are using to meet the 2FA requirement GitHub has been rolling out. I don't love the idea of having an authenticator app installed on my phone just to log into GitHub. And really don't want to give them my phone number just to log in.

Last year, we announced our commitment to require all developers who contribute code on GitHub.com to enable two-factor authentication (2FA)...

(page 2) 50 comments

sorted by: hot top controversial new old

[–] Deckweiss@lemmy.world 3 points 5 months ago* (last edited 5 months ago)

I deleted my github account because fuck microsoft. Open source should not be hosted on their servers.

In regards to forced 2fa, as I don't need it on my projects, there would be literally nothing lost if somebody gets into my account.

Just for the convenience I moved them to my selfhosted forgejo and mirroring to sr.ht as a backup.

[–] ultratiem@lemmy.ca 3 points 5 months ago* (last edited 5 months ago)

iCloud Keychain. Has the ability to store 2FA codes and pull them up automatically. GitHub also supports passkeys so most times I just log in with my biometrics or user pass and don’t have to worry about the added layer.

I’m fine with regular 2FA. What I can’t abide is having to use proprietary apps, like Blizzard’s battle net. Steam too.

Passkeys are the future but still a ways off.

Wild tho that you don’t have any other accounts needing 2FA? That’s scary to me as that added security goes a long ass way in regards to hardening your secuity.

[–] isVeryLoud@lemmy.ca 2 points 5 months ago

ITT: People who think they know better than security researchers

[–] flumph@programming.dev 2 points 5 months ago

2FAS is open source and doesn't have a cloud presence to store data. You can use it to add 2FA to your other services as well.

load more comments