News for hackers. Stuff that matters.

A comment on GitHub Supports Web Authentication (WebAuthn) for Security Keys. Parent comment

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by akerl_ on Wednesday August 21, 2019 @04:47PM (#20761628)
To clarify: you can disable SMS MFA on Github (or never set it up in the first place). Doing so does require setting up TOTP, though you’re able to validate the initial code and then delete your copy of the secret key.
[ Parent | on HN ]
Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by munchbunny on Wednesday August 21, 2019 @04:51PM (#20761686)
Sorry, I maybe wasn't clear enough. You can disable SMS MFA (I did), but it didn't sound like you could disable SMS recovery codes, which is the other section further down in the UI for configuring your login setup.
[ Parent | on HN ]
Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by akerl_ on Wednesday August 21, 2019 @04:53PM (#20761709)
Ah. Those are disable-able as well: https://imgur.com/a/bLnRuOq
[ Parent | on HN ]
Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by munchbunny on Wednesday August 21, 2019 @04:59PM (#20761772)
Awesome! I'm glad I stand corrected.
[ Parent | on HN ]