{"id":1232785,"date":"2023-05-30T18:06:17","date_gmt":"2023-05-30T17:06:17","guid":{"rendered":"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/"},"modified":"2023-05-30T18:06:17","modified_gmt":"2023-05-30T17:06:17","slug":"pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar","status":"publish","type":"post","link":"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/","title":{"rendered":"PyPI brings in mandatory 2FA for all software publishers following &#8230; &#8211; TechRadar"},"content":{"rendered":"<p> <script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<!-- newscabal uk text -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:inline-block;width:728px;height:90px\"\r\n     data-ad-client=\"ca-pub-8162386273903324\"\r\n     data-ad-slot=\"3688094655\"><\/ins>\r\n<script>\r\n(adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\n<\/p>\n<div id=\"article-body\">\n<p>PyPI has announced that all users who maintain a project or organization on the platform must now set up two-factor <a href=\"https:\/\/www.techradar.com\/best\/best-authenticator-apps\">authentication<\/a> in an effort to increase security.<\/p>\n<p>This follows previous measures set out by PyPI, including optional <a href=\"https:\/\/www.techradar.com\/features\/what-is-2fa-and-mfa\">2FA<\/a>, blocking compromised passwords, support for API tokens, and mandatory 2FA for certain projects.<\/p>\n<aside class=\"hawk-nest\" data-render-type=\"fte\" data-skip=\"dealsy\" data-widget-type=\"seasonal\"\/>\n<p>This comes just days after some new registrations were suspended on the platform following an excess of malicious code, impersonation, and other security concerns.<\/p>\n<h2 id=\"2fa-for-pypi\">2FA for PyPI<\/h2>\n<p>Many users are likely to have a six-month window to apply the additional authentication measure to their account, with plans drawn up to make 2FA mandatory by the end of this year. The <a href=\"https:\/\/www.techradar.com\/best\/python-online-courses\"><u>Python<\/u><\/a> repository\u2019s official <a href=\"https:\/\/blog.pypi.org\/posts\/2023-05-25-securing-pypi-with-2fa\/\" target=\"_blank\" data-url=\"https:\/\/blog.pypi.org\/posts\/2023-05-25-securing-pypi-with-2fa\/\" rel=\"noopener\"><u>blog post<\/u><\/a> explains more:<\/p>\n<p>\u201cBetween now and the end of the year, PyPI will begin gating access to certain site functionality based on 2FA usage. In addition, we may begin selecting certain users or projects for early enforcement.\u201d<\/p>\n<p>The post continues to detail the preferred method of authentication &#8211; physical devices &#8211; though authenticator apps and other services remain supported. Uploads should be done via trusted publishers or API tokens to ensure optimal security, too.<\/p>\n<p>When posing itself the question of why not all users should be forced to use 2FA, PyPI says: \u201can account without access to any project cannot be used to attack anyone 2 so it is a very low value target.\u201d<\/p>\n<p>Among the numerous reasons given for employing mandatory 2FA, PyPI calls out GitHub for taking similar steps, as well as funding that enabled the hiring of a PyPI Safety and Security Engineer.<\/p>\n<p>As two- and multi-factor authentication become increasingly important for securing accounts, many have slated SMS-based authentication for its inferior security and reliance on cellular service. Then, there is the gradual rollout of passwordless passkeys, which is slowly building traction after a delayed start.<\/p>\n<\/div>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-client=\"ca-pub-8162386273903324\"\r\n     data-ad-slot=\"7859258044\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\n<br \/><a href=\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues\">READ SOURCE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>PyPI has announced that all users who maintain a project or organization on the platform must now set up two-factor authentication in an effort to increase security. This follows previous measures set out by PyPI, including optional 2FA, blocking compromised passwords, support for API tokens, and mandatory 2FA for certain projects. This comes just days [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1232786,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_oct_exclude_from_cache":false,"footnotes":""},"categories":[53],"tags":[],"class_list":["post-1232785","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>PyPI brings in mandatory 2FA for all software publishers following ... - TechRadar - Business Telegraph<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PyPI brings in mandatory 2FA for all software publishers following ... - TechRadar - Business Telegraph\" \/>\n<meta property=\"og:description\" content=\"PyPI has announced that all users who maintain a project or organization on the platform must now set up two-factor authentication in an effort to increase security. This follows previous measures set out by PyPI, including optional 2FA, blocking compromised passwords, support for API tokens, and mandatory 2FA for certain projects. This comes just days [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues\" \/>\n<meta property=\"og:site_name\" content=\"Business Telegraph\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-30T17:06:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"businesstelegraph\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"businesstelegraph\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/\"},\"author\":{\"name\":\"businesstelegraph\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78\"},\"headline\":\"PyPI brings in mandatory 2FA for all software publishers following &#8230; &#8211; TechRadar\",\"datePublished\":\"2023-05-30T17:06:17+00:00\",\"dateModified\":\"2023-05-30T17:06:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/\"},\"wordCount\":320,\"publisher\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg\",\"articleSection\":[\"security\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/\",\"url\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues\",\"name\":\"PyPI brings in mandatory 2FA for all software publishers following ... - TechRadar - Business Telegraph\",\"isPartOf\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg\",\"datePublished\":\"2023-05-30T17:06:17+00:00\",\"dateModified\":\"2023-05-30T17:06:17+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg\",\"contentUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg\",\"width\":1200,\"height\":675},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.businesstelegraph.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PyPI brings in mandatory 2FA for all software publishers following &#8230; &#8211; TechRadar\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#website\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/\",\"name\":\"Business Telegraph UK\",\"description\":\"business, tech and industry news\",\"publisher\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.businesstelegraph.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\",\"name\":\"Business Telegraph UK\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png\",\"contentUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png\",\"width\":500,\"height\":177,\"caption\":\"Business Telegraph UK\"},\"image\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78\",\"name\":\"businesstelegraph\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/author\/businesstelegraph\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PyPI brings in mandatory 2FA for all software publishers following ... - TechRadar - Business Telegraph","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues","og_locale":"en_GB","og_type":"article","og_title":"PyPI brings in mandatory 2FA for all software publishers following ... - TechRadar - Business Telegraph","og_description":"PyPI has announced that all users who maintain a project or organization on the platform must now set up two-factor authentication in an effort to increase security. This follows previous measures set out by PyPI, including optional 2FA, blocking compromised passwords, support for API tokens, and mandatory 2FA for certain projects. This comes just days [&hellip;]","og_url":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues","og_site_name":"Business Telegraph","article_published_time":"2023-05-30T17:06:17+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg","type":"image\/jpeg"}],"author":"businesstelegraph","twitter_card":"summary_large_image","twitter_misc":{"Written by":"businesstelegraph","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#article","isPartOf":{"@id":"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/"},"author":{"name":"businesstelegraph","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78"},"headline":"PyPI brings in mandatory 2FA for all software publishers following &#8230; &#8211; TechRadar","datePublished":"2023-05-30T17:06:17+00:00","dateModified":"2023-05-30T17:06:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/"},"wordCount":320,"publisher":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#organization"},"image":{"@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage"},"thumbnailUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg","articleSection":["security"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.businesstelegraph.co.uk\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-techradar\/","url":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues","name":"PyPI brings in mandatory 2FA for all software publishers following ... - TechRadar - Business Telegraph","isPartOf":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage"},"image":{"@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage"},"thumbnailUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg","datePublished":"2023-05-30T17:06:17+00:00","dateModified":"2023-05-30T17:06:17+00:00","breadcrumb":{"@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#primaryimage","url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg","contentUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/05\/PyPI-brings-in-mandatory-2FA-for-all-software-publishers-following.jpg","width":1200,"height":675},{"@type":"BreadcrumbList","@id":"https:\/\/www.techradar.com\/news\/pypi-brings-in-mandatory-2fa-for-all-software-publishers-following-recent-security-issues#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.businesstelegraph.co.uk\/"},{"@type":"ListItem","position":2,"name":"PyPI brings in mandatory 2FA for all software publishers following &#8230; &#8211; TechRadar"}]},{"@type":"WebSite","@id":"https:\/\/www.businesstelegraph.co.uk\/#website","url":"https:\/\/www.businesstelegraph.co.uk\/","name":"Business Telegraph UK","description":"business, tech and industry news","publisher":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.businesstelegraph.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.businesstelegraph.co.uk\/#organization","name":"Business Telegraph UK","url":"https:\/\/www.businesstelegraph.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png","contentUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png","width":500,"height":177,"caption":"Business Telegraph UK"},"image":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78","name":"businesstelegraph","url":"https:\/\/www.businesstelegraph.co.uk\/author\/businesstelegraph\/"}]}},"_links":{"self":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts\/1232785","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/comments?post=1232785"}],"version-history":[{"count":0,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts\/1232785\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/media\/1232786"}],"wp:attachment":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/media?parent=1232785"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/categories?post=1232785"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/tags?post=1232785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}