GitHub, Yubico Introduce Millions To U2F

Today GitHub introduced U2F support enabling its users to access and protect the integrity of their software code with easy-to-use strong public key cryptography. GitHub’s volume of sensitive data demands proactive efforts to constantly improve security and access controls. Strong authentication, like that provided by U2F, helps protect against modern hacker techniques used in the current breach-filled world.

Since 2008, GitHub has grown into one of the largest developer communities in the world. With more than 11 million users working on more than 27 million projects, GitHub supports and encourages security measures — such as two-factor and the emerging open authentication standard, Universal 2nd Factor (U2F) — that keep accounts safe.

The YubiKey is a hardware device that implements U2F and works with a simple touch to trigger U2F’s public/private key exchange. Easy to use, the YubiKey simply plugs into a USB port to begin the process of securely authenticating the user.

As co-creators of the FIDO U2F protocol, we are thrilled to help GitHub put U2F-compliant YubiKey devices in the hands of developers currently creating services used by everyone on the internet. After taking a look at the open-source examples of U2F implementations, GitHub was able to build comprehensive support in a short time, taking advantage of the open-source community around U2F that Yubico has nurtured.

On the heels of U2F support added by Google and Dropbox, GitHub — committed to adopting standards-based technology — has stepped up as a strong U2F advocate. The company aims to set an example and help put the ‘U’ in Universal 2nd Factor by making U2F available for every GitHub user, including every GitHub employee. GitHub also plans to push leaders in technology and other industries to support U2F’s ease-of-use along with its promise of better security and privacy.

We are proud to be associated with GitHub and its ecosystem, and we join them in pushing developers, companies, and industries to take action now and put simple, scalable public key cryptography in the hands of millions of internet users.

To the GitHub community, we hope you enjoy your YubiKey!  

GitHub Supports Universal 2nd Factor Authentication from Yubico on Vimeo.

Also see:

Talk to our teamTalk to our team

Share this article:


  • Goodbye master passwords: Dashlane and Yubico enhance credential vault encryption and login with YubiKeysAt Authenticate 2025 this week, the world’s leading experts on modern authentication and securing digital identities gathered, to discuss the future of secure authentication and achieving usable security across the account lifecycle. The message was clear: the future of phishing-resistant authentication is using passkeys for encryption, and the gold standard is device-bound passkeys – YubiKeys. […]Read morecredential vault encryptioncredential vault loginDashlanepartnerpasskey encryptionPRF
  • Piloting Europe’s future ID: Passkeys securing digital walletsOver the last several years, passkeys have become ubiquitous. They are available on every mobile platform, in every leading browser, as part of all major enterprise IAM solutions, and in most major cloud services. Until wwWallet came along, the only place where passkeys hadn’t yet made an impact is in the rapidly developing world of […]Read moredigital identity walletspasskeysSIROSwwWallet
  • We’re excited for what’s to come – meet us in-person to find out whyIt’s been a busy year for our team, filled with exciting company and product updates aimed at better serving our customers and helping them achieve cyber resilience as AI-driven phishing threats continue evolving globally. Between industry award recognitions and key new executive leadership hires to lead Yubico to its next stage of growth and a […]Read more
  • FIPS certified vs. FIPS compliant: What’s the real difference?“Is your MFA solution FIPS compliant, or is it certified?”  This is a question we hear a lot, and for good reason. In industries where security and compliance are critical (especially in government contracts), understanding the difference between FIPS certified and FIPS compliant isn’t just semantics – it can mean the difference between meeting requirements […]Read moreFIPSNIST