{"id":30678,"date":"2015-10-01T17:00:38","date_gmt":"2015-10-02T00:00:38","guid":{"rendered":"https:\/\/github.blog\/\/2015-10-01-github-supports-universal-2nd-factor-authentication\/"},"modified":"2021-12-20T14:31:48","modified_gmt":"2021-12-20T22:31:48","slug":"github-supports-universal-2nd-factor-authentication","status":"publish","type":"post","link":"https:\/\/github.blog\/news-insights\/product-news\/github-supports-universal-2nd-factor-authentication\/","title":{"rendered":"GitHub supports Universal 2nd Factor authentication"},"content":{"rendered":"

May 5, 2021 update<\/strong>: The limited edition U2F Security Keys described in this post are no longer available. <\/em><\/p>\n

To help users better secure their accounts, we are expanding GitHub’s authentication system<\/a> to support FIDO Universal 2nd Factor (U2F)\u2014a rapidly growing open authentication standard.<\/p>\n

GitHub encourages developers to build U2F support into their own applications as well, enabling authentication with simple user experience and strong security using public key cryptography. U2F is built to protect against phishing and man-in-the-middle attacks, allowing one U2F authenticator to access any number of services without any shared secrets. Since U2F has native support in platforms and browsers, there\u2019s no need for drivers or client software. Read more about how U2F keys work<\/a> or take a look at the GitHub U2F documentation<\/a> to learn how to associate a U2F key with your GitHub account.<\/p>\n

In order to take advantage of the security improvements provided by U2F, you’ll need to purchase a hardware key. You can purchase the U2F key of your choice from a range of vendors.<\/p>\n

We are partnering with Yubico<\/a>, inventor of the YubiKey, co-creator of the U2F protocol, and a leading provider of U2F authenticators. Together with Yubico we are offering discounts to GitHub users for a limited time through a special offer page where you will verify your GitHub account<\/a> and place your order:<\/span><\/p>\n