Token authentication requirements for Git operations
Blog post from GitHub
GitHub announced that starting August 13, 2021, account passwords will no longer be accepted for authenticating Git operations on GitHub.com, requiring the use of token-based authentication methods such as personal access tokens, OAuth, or GitHub App installation tokens instead. This change aims to enhance security by replacing passwords with tokens that are unique, revocable, limited in scope, and resistant to brute force attacks. Two-factor authentication users and GitHub Enterprise Server customers are unaffected by this change. To prepare, developers and integrators must update their authentication methods, using either HTTPS personal access tokens or SSH keys, and ensure any third-party integrations are up to date. Two scheduled brownouts on June 30 and July 28, 2021, will serve as practice runs to remind users to transition to the new authentication methods before the final implementation date.