From 890540254e5d221876ce445367b13b2dcbdcce2d Mon Sep 17 00:00:00 2001 From: Raghav Kaul <8695110+raghavkaul@users.noreply.github.com> Date: Wed, 10 Jan 2024 14:09:02 -0500 Subject: [PATCH] Update README.md Update docs on 2FA Closes #7 Signed-off-by: Raghav Kaul <8695110+raghavkaul@users.noreply.github.com> --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index fce2f583503..08febe4bec1 100644 --- a/README.md +++ b/README.md @@ -517,7 +517,7 @@ For a guide to the checks you should use when getting started, see the [beginner [Two-factor Authentication (2FA)](https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/about-two-factor-authentication) adds an extra layer of security when logging into websites or apps. 2FA protects your account if your password is compromised by requiring a second form of authentication, such as codes sent via SMS or authentication app, or touching a physical security key. -We strongly recommend that you enable 2FA on GitHub and any important account where it is available. 2FA is not a Scorecard check because GitHub does not make that data about user accounts public. Arguably, this data should always remain private, since accounts without 2FA are so vulnerable to attack. +We strongly recommend that you enable 2FA on any important accounts where it is available. 2FA is not a Scorecard check because GitHub and GitLab do not make that data about user accounts public. Arguably, this data should always remain private, since accounts without 2FA are so vulnerable to attack. Though it is not an official check, we urge all project maintainers to enable 2FA to protect their projects from compromise.