Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add MFA "UI only" removal blog post #119

Merged
merged 1 commit into from
Aug 23, 2022
Merged

Add MFA "UI only" removal blog post #119

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions _posts/2022-08-22-mfa-ui-only-removed.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
---
title: An Update to RubyGems MFA Levels
layout: post
author: Kevin Lin
author_email: [email protected]
---

# Summary

The `UI only` multi-factor authentication level is being removed.
Users who remain on the UI only MFA level will be migrated to the UI and gem signin level on September 22nd, 2022.

# Why is this happening?

In essence, the `UI and gem signin` level is the same as the `UI only` level, but it also requires that the `gem signin` command is verified with multi-factor authentication.
This ensures that accounts with MFA protection are not impacted by compromised passwords.

# What is going to change?
After the migration, users who were on the `UI only` level will need to enter a one-time password when using `gem signin`. For everyone else, nothing will change.

If you are using `gem signin` in automated builds, we recommend that you migrate to using a pre-generated API key for authentication. You can either set the `API_KEY` environment variable to the value of your API key or write the key to `credentials` file:

`echo "https://rubygems.org: YOUR_API_KEY" > ~/.gem/credentials`

Check out the [guides](https://guides.rubygems.org/setting-up-multifactor-authentication/#authentication-levels) for more information on RubyGems MFA levels.