UpdateImportance 2 of 5
GitHub Desktop adds short-lived authentication tokens
GitHub Desktop 3.6.10 and later lets eligible accounts sign in using short-lived, automatically refreshing authentication tokens. The change is intended to shorten how long a leaked access token remains usable.
Why it matters
Shorter-lived tokens reduce the window in which a leaked credential from a desktop client can be abused. Teams using GitHub Desktop for repository access may need to review how their accounts authenticate.
Who should care
Software developers, engineering teams, and security administrators who use GitHub Desktop with GitHub accounts.
What you can do
Update GitHub Desktop to version 3.6.10 or later and check whether your GitHub account is eligible for short-lived tokens.