From 123e1b286bd8b226261546a621bbc6d640296322 Mon Sep 17 00:00:00 2001 From: Josh Soref <2119212+jsoref@users.noreply.github.com> Date: Thu, 2 Oct 2025 23:16:53 -0400 Subject: [PATCH 1/5] Try to explain how to deal with secure 2fa requirements --- .../requiring-two-factor-authentication-in-your-organization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md index 6fe284f8140f..6b62597b4825 100644 --- a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md +++ b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md @@ -73,7 +73,7 @@ Before you require use of two-factor authentication, we recommend notifying {% i Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators use secure methods of 2FA. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. -Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers and asking them to set up secure 2FA for their accounts. You can see if members and outside collaborators already use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). +Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: instructing them to set up secure 2FA for their accounts and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). {% data reusables.organizations.secure_two_factor_authentication %} {% data reusables.organizations.secure_two_factor_authentication_confirm %} From c546b88502de445a87f5dc0ad0f8d3d12aa35844 Mon Sep 17 00:00:00 2001 From: Josh Soref <2119212+jsoref@users.noreply.github.com> Date: Thu, 2 Oct 2025 23:21:32 -0400 Subject: [PATCH 2/5] Add another instance of `exclusively` --- .../requiring-two-factor-authentication-in-your-organization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md index 6b62597b4825..c2dea5989e93 100644 --- a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md +++ b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md @@ -71,7 +71,7 @@ Before you require use of two-factor authentication, we recommend notifying {% i ### Requiring secure methods of two-factor authentication in your organization -Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators use secure methods of 2FA. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. +Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators exclusively use secure methods of 2FA. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: instructing them to set up secure 2FA for their accounts and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). From 7d9cba92200825bb64caac97d9b8cc9e2f82c30e Mon Sep 17 00:00:00 2001 From: Ben Ahmady <32935794+subatoi@users.noreply.github.com> Date: Fri, 28 Aug 2026 10:21:05 +0100 Subject: [PATCH 3/5] Apply suggestion from @subatoi --- .../requiring-two-factor-authentication-in-your-organization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md index c2dea5989e93..b65cd5f7276c 100644 --- a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md +++ b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md @@ -73,7 +73,7 @@ Before you require use of two-factor authentication, we recommend notifying {% i Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators exclusively use secure methods of 2FA. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. -Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: instructing them to set up secure 2FA for their accounts and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). +Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: you should them to set up secure 2FA for their accounts, and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). {% data reusables.organizations.secure_two_factor_authentication %} {% data reusables.organizations.secure_two_factor_authentication_confirm %} From db2fc1d5b527ed288665335396ed78377c356d4e Mon Sep 17 00:00:00 2001 From: Ben Ahmady <32935794+subatoi@users.noreply.github.com> Date: Fri, 28 Aug 2026 10:27:34 +0100 Subject: [PATCH 4/5] Apply suggestion from @subatoi --- .../requiring-two-factor-authentication-in-your-organization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md index b65cd5f7276c..d737ec54952d 100644 --- a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md +++ b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md @@ -73,7 +73,7 @@ Before you require use of two-factor authentication, we recommend notifying {% i Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators exclusively use secure methods of 2FA. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. -Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: you should them to set up secure 2FA for their accounts, and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). +Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: you should instruct them to set up secure 2FA for their accounts and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). {% data reusables.organizations.secure_two_factor_authentication %} {% data reusables.organizations.secure_two_factor_authentication_confirm %} From 5d6aeed625380d1ec78d45ba6b5a7150f6841569 Mon Sep 17 00:00:00 2001 From: Ben Ahmady <32935794+subatoi@users.noreply.github.com> Date: Fri, 28 Aug 2026 10:34:42 +0100 Subject: [PATCH 5/5] Apply batched suggestions from code review Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com> --- ...equiring-two-factor-authentication-in-your-organization.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md index d737ec54952d..cbf306464795 100644 --- a/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md +++ b/content/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization.md @@ -71,9 +71,9 @@ Before you require use of two-factor authentication, we recommend notifying {% i ### Requiring secure methods of two-factor authentication in your organization -Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators exclusively use secure methods of 2FA. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. +Alongside requiring two-factor authentication, you can require that organization members, billing managers, and outside collaborators use secure methods of 2FA exclusively. Secure two-factor methods are passkeys, security keys, authenticator apps, and the GitHub mobile app. Users who do not have a secure method of 2FA configured, or who have any insecure method (such as SMS) configured, will be prevented from accessing organization resources. -Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: you should instruct them to set up secure 2FA for their accounts and then remove insecure methods of 2FA (including SMS). You can see if members and outside collaborators already exclusively use secure methods of 2FA on each organization's People page. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). +Before you require secure methods of two-factor authentication, we recommend notifying organization members, outside collaborators, and billing managers: you should instruct them to set up secure 2FA for their accounts and then remove insecure methods of 2FA (including SMS). On each organization's People page, you can see if members and outside collaborators already use secure methods of 2FA exclusively. For more information, see [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/viewing-whether-users-in-your-organization-have-2fa-enabled). {% data reusables.organizations.secure_two_factor_authentication %} {% data reusables.organizations.secure_two_factor_authentication_confirm %}