Re:Google Authenticator cloud sync/backup is not E2E encrypted
by judge2020 on Tuesday April 25, 2023 @11:42PM
(#35709445)
Chrome passwords are encrypted with your password (just not e2ee) so it'd have to be a targeted attack where they log your password the next time you log in and then use that to decrypt your chrome passwords. Chrome also allows you to set your own sync passphrase different from your Google account password.
[ Parent
| on HN ]
Re:Google Authenticator cloud sync/backup is not E2E encrypted
by NoZebra120vClip on Wednesday April 26, 2023 @10:41AM
(#35714388)
Google says it's encrypted "with your Google account", not with your password. I don't know what the former means, but they do not say they're using your password to encrypt it.