Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am concerned to let any team member in with a weak password on my dev team but I do not see a way to enforce that as a requirement in GitHub. Is this possible?

The concern is that a team members account gets hacked and then private source code becomes accessible to the world or competitors.

share|improve this question

migrated from superuser.com Aug 4 '11 at 14:28

This question came from our site for computer enthusiasts and power users.

GitHub does not provide any way to set custom password policies; all accounts are independent. (Implementing such support would require the passwords to be stored in a plaintext/decryptable form, which is even worse for security.)

You could set up your own Git server – using Gitolite if you need detailed access control, but even pushing over plain SSH would allow you to set up your own policies.

GitHub being Git, however, it's next to impossible to do any permanent damage to the data – every team member has a copy of the entire version history.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.