Case Study: GitHub achieves stronger phishing-resistant authentication with Yubico YubiKeys

GitHub secures 11 million developers with Yubico U2F in months

The customer, GitHub, is a major developer community hosting over 11 million users and 27 million projects. Their challenge was to improve upon their existing two-factor authentication (SMS and TOTP), which had low reliability and did not protect against modern phishing attacks. They partnered with vendor Yubico to implement stronger security using U2F-certified YubiKeys.

Yubico's solution involved providing GitHub with YubiKeys and reference code for a quick implementation. The result was a global deployment of U2F authentication to GitHub's entire community of 11 million developers, providing a more durable, easy-to-use, and strong form of hardware-backed security that effectively defends against phishing.

GitHub