# Enabling 2FA on major Github orgs

**URL:** <https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957>\
**Category:** Community\
**Tags:** security\
**Created:** [December 7, 2019, 3:18am UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957 "2019-12-07T03:18:13Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![viralbshah](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/viralbshah/32/54_2.png) [@viralbshah](https://discourse.julialang.org/u/viralbshah)\
**Post date:** [December 7, 2019, 3:18am UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/1 "2019-12-07T03:18:13Z")

</div>

I think it would be great for major orgs to turn on 2FA for all org members as general security hygiene. We did this on JuliaLang a while ago, and I enabled it on JuliaPackaging today. I am sure some orgs already do this, but I am posting this here to encourage more orgs to require 2FA for all members.

-viral

---

<div class="post-metadata">

**Author:** ![dilumaluthge](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/dilumaluthge/32/29283_2.png) [@dilumaluthge](https://discourse.julialang.org/u/dilumaluthge)\
**Post date:** [December 7, 2019, 5:00am UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/2 "2019-12-07T05:00:22Z")

</div>

@viralbshah Can you also implement this on JuliaCI and JuliaRegistries?

---

<div class="post-metadata">

**Author:** ![oxinabox](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/oxinabox/32/206603_2.png) [@oxinabox](https://discourse.julialang.org/u/oxinabox)\
**Post date:** [December 7, 2019, 5:14am UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/3 "2019-12-07T05:14:37Z")

</div>

We did this in JuliaCollections in August.

---

<div class="post-metadata">

**Author:** ![viralbshah](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/viralbshah/32/54_2.png) [@viralbshah](https://discourse.julialang.org/u/viralbshah)\
**Post date:** [December 7, 2019, 2:06pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/4 "2019-12-07T14:06:36Z")

</div>

I enabled 2FA on JuliaCI. JuliaRegistries already has it.

-viral

---

<div class="post-metadata">

**Author:** ![ChrisRackauckas](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/chrisrackauckas/32/77_2.png) [@ChrisRackauckas](https://discourse.julialang.org/u/ChrisRackauckas)\
**Post date:** [December 7, 2019, 4:23pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/5 "2019-12-07T16:23:52Z")

</div>

JuliaDiffEq requires this for write privileges, and we plan to start booting people without it soon.

---

<div class="post-metadata">

**Author:** ![viralbshah](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/viralbshah/32/54_2.png) [@viralbshah](https://discourse.julialang.org/u/viralbshah)\
**Post date:** [April 9, 2020, 10:20pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/6 "2020-04-09T22:20:07Z")

</div>

Bumping this thread again. Many orgs still do not have 2FA for all owners. How can we go about making this happen for owners and members?

-viral

---

<div class="post-metadata">

**Author:** ![dilumaluthge](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/dilumaluthge/32/29283_2.png) [@dilumaluthge](https://discourse.julialang.org/u/dilumaluthge)\
**Post date:** [April 10, 2020, 5:08pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/7 "2020-04-10T17:08:36Z")

</div>

It might be helpful to assemble a list of Julia orgs, then we can start working our way down the list by contacting owners, etc.

---

<div class="post-metadata">

**Author:** ![viralbshah](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/viralbshah/32/54_2.png) [@viralbshah](https://discourse.julialang.org/u/viralbshah)\
**Post date:** [April 10, 2020, 6:55pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/8 "2020-04-10T18:55:24Z")

</div>

I extracted all orgs in General (which includes user accounts as well as orgs). There are 94 with the Julia prefix, which suggests that it is somewhat official. Both lists are in the gist below. Maybe about 30 of these may need 2FA attention to start with?

> <https://gist.github.com/ViralBShah/b00207b976943dbe7a05b58c267923fa>

-viral

---

<div class="post-metadata">

**Author:** ![ChrisRackauckas](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/chrisrackauckas/32/77_2.png) [@ChrisRackauckas](https://discourse.julialang.org/u/ChrisRackauckas)\
**Post date:** [April 10, 2020, 6:58pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/9 "2020-04-10T18:58:42Z")

</div>

SciML now requires 2FA

---

<div class="post-metadata">

**Author:** ![viralbshah](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/viralbshah/32/54_2.png) [@viralbshah](https://discourse.julialang.org/u/viralbshah)\
**Post date:** [April 10, 2020, 7:02pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/10 "2020-04-10T19:02:37Z")

</div>

2FA now also required on JuliaParallel, JuliaBerry, JuliaSparse and a few others I am part of.

---

<div class="post-metadata">

**Author:** ![ericphanson](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/ericphanson/32/215186_2.png) [@ericphanson](https://discourse.julialang.org/u/ericphanson)\
**Post date:** [April 10, 2020, 7:12pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/11 "2020-04-10T19:12:23Z")

</div>

There is also a list of GitHub groups here:

> **[Community](https://julialang.org/community/#julia_github_groups)**
>
> The official website for the Julia Language. Julia is a language that is fast, dynamic, easy to use, and open source. Click here to learn more.

which could provide a smaller list to focus on first.

---

<div class="post-metadata">

**Author:** ![viralbshah](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/viralbshah/32/54_2.png) [@viralbshah](https://discourse.julialang.org/u/viralbshah)\
**Post date:** [April 10, 2020, 7:17pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/12 "2020-04-10T19:17:59Z")

</div>

In fact my hope was to use this opportunity to curate the list of orgs that provide popular packages, and then go back and update it on the julia website. I even want to advertise the orgs and the packages a bit more on [julialang.org](http://julialang.org) instead of just listing them.

-viral

---

<div class="post-metadata">

**Author:** ![PetrKryslUCSD](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/petrkryslucsd/32/215825_2.png) [@PetrKryslUCSD](https://discourse.julialang.org/u/PetrKryslUCSD)\
**Post date:** [April 10, 2020, 7:29pm UTC](https://discourse.julialang.org/t/enabling-2fa-on-major-github-orgs/31957/13 "2020-04-10T19:29:01Z")

</div>

JuliaPDE has 2FA enabled.