In accordance with the previously announced plan, GitHub will discontinue support for connecting to Git objects using password authentication. This change will take effect today at 7 PM (MSK), after which direct execution of Git operations requiring authentication will only be possible using SSH keys or tokens (personal GitHub tokens or OAuth). An exception is made only for accounts using two-factor authentication that connect to Git with a password and an additional key.
The tightening of authentication requirements is expected to protect users from compromising their repositories in the event of a leak of user databases or hacks of third-party services on which users have used the same passwords as on GitHub. Advantages of token-based authentication include: the ability to generate separate tokens for specific devices and sessions, support for revoking compromised tokens without changing credentials, the possibility to restrict access scope through tokens, and the security of tokens against brute force attacks.
Source: opennet.ru
