Home / Companies / GitHub / Blog / Post Details
Content Deep Dive

Token authentication requirements for Git operations

Blog post from GitHub

Post Details
Company
Date Published
Author
Matthew Langlois
Word Count
745
Language
English
Hacker News Points
-
Summary

GitHub announced that starting August 13, 2021, account passwords will no longer be accepted for authenticating Git operations on GitHub.com, requiring the use of token-based authentication methods such as personal access tokens, OAuth, or GitHub App installation tokens instead. This change aims to enhance security by replacing passwords with tokens that are unique, revocable, limited in scope, and resistant to brute force attacks. Two-factor authentication users and GitHub Enterprise Server customers are unaffected by this change. To prepare, developers and integrators must update their authentication methods, using either HTTPS personal access tokens or SSH keys, and ensure any third-party integrations are up to date. Two scheduled brownouts on June 30 and July 28, 2021, will serve as practice runs to remind users to transition to the new authentication methods before the final implementation date.