GitHub Makes Two-Factor Authentication Mandatory for All Users by 2026
GitHub's 2FA is to become mandatory on September 2, 2026
GitHub is officially requiring two-factor authentication for specific contributors starting September 2, 2026. If you currently have 2FA enabled, you do not need to take any action, but you will be unable to disable it after the deadline. Disabling it before then will restrict your access to GitHub.com until you re-enable it. This move strengthens the software supply chain and ensures the security of the world's code.
Making the software supply chain more secure is a team effort, and we couldn't do it without you.
- majewsky
The fact that one of the orgs that you're a member of is flipping the switch is not newsworthy.
- lioeters
If anyone prefers not to use a mobile phone for this purpose, it is possible to use an application such as Authenticator (fox Linux).
https://gitlab.gnome.org/World/Authenticator
There are disadvantages to this, but for some people the requirement of a phone for 2FA is inconvenient or unacceptable.
- m0llusk
I'm an uncertain contributor so this shouldn't apply to me.