Prior to being acquired by Microsoft, github did not require two-factor authentication. You could either use a password or a public key.