By the end of 2023, all users contributing code on GitHub must enable one or more forms of 2FA.

2FA is a powerful next line of defense; however, despite demonstrated success, 2FA adoption across the software ecosystem remains low overall. Today, only approximately 16.5% of active GitHub users and 6.44% of npm users use one or more forms of 2FA.

[github.blog...]