Security News > 2021 > May > GitHub now supports security keys when using Git over SSH

GitHub now supports security keys when using Git over SSH
2021-05-10 20:09

GitHub has added support for securing SSH Git operations using FIDO2 security keys for added protection from account takeover attempts.

"Once generated, you add these new keys to your account just like any other SSH key," GitHub Senior Security Engineer Kevin Jones said.

You can now use FIDO security keys for SSH git operations.

To further increase your GitHub account's resilience against takeover attempts, you should replace all previously registered SSH keys with SSH keys backed by security keys.

Using only SSH keys backed by FIDO2 devices means that you will not have to keep track of all SSH keys you generate since they are useless without access to the security key they are paired with.

To switch to the new SSH Git operations workflow today, you need to log in to your GitHub account, generate a new SSH key for a hardware security key, and then add it to your account.


News URL

https://www.bleepingcomputer.com/news/security/github-now-supports-security-keys-when-using-git-over-ssh/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Github 10 2 30 29 14 75
SSH 9 2 8 6 1 17
GIT 2 0 3 4 1 8