Github - User Access Token instead of Passwords

Github Authentication: Migrate from Passwords to User Access Token.

In July 2020, Github announced its deprecation of user passwords for all Git operations. From August 13, 2021, Github will no longer accept passwords when authenticating Git operations. Git operations and workflows that will be affected:

Git command line.

Third party Git apps, except for GitHub Desktop.

Any custom service that is accessing Git via password.

Once the GitHub passwords get deprecated, Git operations that use authentication will require the use of token-based (GitHub User Access Token). The motivation behind this decision from GitHub is to increase user’s security from malicious attackers. Of course, SSH keys will still be available if that is your preference.

The main benefits of using GitHub User Access Token are:

Access Tokens are unique and can be generated automatically from GitHub UI.

GitHub User Tokens are revocable, meaning it can be revoked at any time without affecting the login credentials.

GitHub tokens allow to limit the scope of action, ensuring that they give access to required actions only.

How to Create a GitHub User Access Tokens?

GitHub User Tokens can be created from the command line or with the API. These are the easy steps to create a GitHub User Token:

Verify your email account. This is the one associated with your login credentials.

On GitHub UI, click on your profile icon and navigate to Settings.

In the Settings section, navigate to “Developer settings” and then to “Personal access tokens”.

Now click on the “Generate new token” button. You might be prompted to introduce your password.

You must give your token a descriptive name and then select the permission scope. This will allow you to select which actions can be executed using this token.

Finally, click on the “Generate Token” button to create your User Access Token.

It is important to understand that tokens are like passwords. They shouldn’t be shared easily and you must keep them safe. Great power comes with great responsibility.

How to Change Git User Name and Email

Easy steps to configure a Git repository and change the Git user name and email. A review of git's config object and how to retrieve information from a git repository using the git config command.

Github - User Access Token instead of Passwords

Miquel Canal

Github Authentication: Migrate from Passwords to User Access Token.

How to Create a GitHub User Access Tokens?

References

How to Change Git User Name and Email

How to change the author of a commit

Best Practices in Express JS (Node.js)