I'm considering migrating my projects to another Git provider... I won't be using your damn 2FA.

[tipone]

Select Topic Area

General

Body

I'm thinking of moving my projects to another Git provider... I won't be using your damn 2FA.

I don't think it's right that you force developers to use such an illogical, stupid, and pointless 2FA.

How can I convey this security preference to the idiots at Microsoft?

Thank you.

[VictorMoni]

Hi @tipone

I understand your frustration, but GitHub enforces 2FA to protect accounts and repositories from unauthorized access.
If you’d like to share feedback, the best way is to open a ticket directly with GitHub Support or use the GitHub Feedback Discussions.

This way, your concerns will reach the team in the right channel.

[tipone]

"I understand your frustration, but GitHub enforces 2FA to protect accounts and repositories from unauthorized access."

We keep all our credentials on fixed devices like servers or desktops in the office. There's a reason for this: mobile devices can be lost, forgotten, or stolen.

Many private sector and defense industry companies strictly enforce this rule.

This is a real security measure!

We maintain the highest level of security for all email and repository access information. As long as GitHub doesn't make these vulnerable to hacking with a mobile device, there's no risk of unauthorized theft.

However, GitHub requires all permissions to be assigned to a mobile device using 2FA. This isn't just a major security vulnerability, it's also a significant risk.

GitHub's 2FA mandate isn't a security improvement; it's a massive security risk.

[tipone]

I've moved everything to Gitlab..
https://gitlab.com/kansukse/

Bye..