Posts: 1,468
Threads: 57
Joined: Jul 2012
Thanks: 12
Given 18 thank(s) in 106 post(s)
05-09-2015, 06:33 AM
(This post was last modified: 05-09-2015, 06:34 AM by bearbin.)
I noticed on the GitHub organisation page that I was the only member of the "Owners" team with two-factor authentication enabled.
I think that to improve security of the organisation and hopefully prevent any sort of hacking/defacement we should make all owners enable 2FA.
If not enforcing this, could you please at least consider enabling 2FA on your own account?
Posts: 1,468
Threads: 57
Joined: Jul 2012
Thanks: 12
Given 18 thank(s) in 106 post(s)
It means that you have to have a secondary authentication code to log in, yes.
Basically that means that either they can text you or you can install an app on your phone that generates codes on demand.
It means that an attacker would not just have to know your password, but also to have control of your phone (or tablet, etc) to get the code.
Posts: 4,621
Threads: 113
Joined: Dec 2011
Thanks: 51
Given 58 thank(s) in 410 post(s)
Okay, but what if my phone breaks? Can't I log back in then?
Posts: 1,468
Threads: 57
Joined: Jul 2012
Thanks: 12
Given 18 thank(s) in 106 post(s)
Yes, you can log back in because you can generate backup codes and keep them safe, and if your phone breaks you can use one of them.
