GitHub has made passkeys generally available across the platform to secure accounts from fraud and enable password-free login for all users.
See also: GitHub Copilot Chat: Developers now have access
Passkeys are associated with specific devices, such as computers, tablets or smartphones, and play a vital role in reducing the risk of data leaks by providing protection against phishing and blocking unauthorized access attempts.
They allow access to applications and online services through personal identification methods, such as PIN codes or biometric authentication, including fingerprints and facial recognition.
Additionally, passkeys significantly enhance user experience and securityby eliminating the need to remember and manage different passwords for every website and application. GitHub introduced support for passkeys in July as part of a public beta for passwordless authentication.
“ Since introducing passkeys in July, tens of thousands of developers have adopted them. Now, all GitHub.com users can use them to protect their account ,” Hirsch Singhal , GitHub’s chief product officer, said Thursday
“With this action, we continue our commitment to provide two-factor authentication (2FA) to all contributors by the end of 2023 and strengthen security across the platform, without impacting the user experience.“
See also: GitHub: Lazarus hackers target devs with malicious projects
To register one or more passkeys, open your account security settings and click “Add Passkey.” If you have already set up passkeys, you may also see the “Upgrade” option, as they can be used as passwords.
This comes after a coordinated move by Apple, Google , and Microsoft to improve support for keyframes across their platforms.
Microsoft announced today that it will allow users to securely sign in to apps and websites using passkeys stored on their mobile devices, starting with the upcoming Windows 11 22H2 on September 26.
Additionally, Google announced support for Chrome 118's allowed combination for users to sign in to websites using keys created on iOS devices and synced via iCloud Keychain to their Mac devices.
Today's announcement also comes after GitHub made 2FA mandatory for all active developers starting March 13. Over the years, the company has also beefed up its account security, implementing login alerts, two-factor authentication, and password lockout.
See also: Fake PoC for a Linux Kernel vulnerability on GitHub contains malware
GitHub is a platform that combines code storage, collaboration, and interaction between developers. It provides tools for managing and developing software, while also focusing on the protection and security of user accounts. With continuous upgrades and improvements, GitHub is an important tool for the programming community, creating an environment that allows for efficient and secure collaboration.
