Re:Google will add E2E encryption to Authenticator backups
by heipei on Thursday April 27, 2023 @11:02AM
(#35729197)
I don't get why anyone would use Google Authenticator over Authy which had device sync, backup and E2E encryption for years.
[ Parent
| on HN ]
Re:Google will add E2E encryption to Authenticator backups
by mey on Thursday April 27, 2023 @11:09AM
(#35729306)
Microsoft Authenticator has backup options but doesn't indicate if there is encryption which is concerning.
https://support.microsoft.com/en-us/account-billing/back-up-...
Re:Google will add E2E encryption to Authenticator backups
by skinkestek on Thursday April 27, 2023 @01:02PM
(#35731158)
Also I burned myself by activating backups in the app and not realizing I had to activate it in system settings in iOS too (or something to that effect).
So I lost my 2-factors, luckily I had spares for most.
Re:Google will add E2E encryption to Authenticator backups
by crazygringo on Thursday April 27, 2023 @11:34AM
(#35729665)
Because they use the Google ecosystem and don't want to deal with yet one more account with yet one more company. Easier to keep things in one place.
Re:Google will add E2E encryption to Authenticator backups
by jacooper on Thursday April 27, 2023 @11:14AM
(#35729375)
How is authy end to end encrypted?
Re:Google will add E2E encryption to Authenticator backups
by nicpottier on Thursday April 27, 2023 @11:31AM
(#35729639)
My understanding is they encrypt your database with a password before syncing to the cloud. They don't sync the password and there's no recovery.
Re:Google will add E2E encryption to Authenticator backups
by toastal on Thursday April 27, 2023 @12:13PM
(#35730307)
Doesn't Authy require a phone number? I don't know why you'd use Authy over something open source.
Re:Google will add E2E encryption to Authenticator backups
by leotravis10 on Thursday April 27, 2023 @02:06PM
(#35732208)
Yep they do, and I don't get it either. I deleted Authy a long time ago and switched to Aegis. No regrets.
Re:Google will add E2E encryption to Authenticator backups
by shortcake27 on Thursday April 27, 2023 @04:18PM
(#35733967)
I need to do this. I’m highly suss of Authy holding my phone number given it’s owned by Twilio. It just doesn’t feel right.
Google Authenticator is still virtually useless because Google routinely locks people out of their accounts with absolutely no recourse.
Re:Google will add E2E encryption to Authenticator backups
by leotravis10 on Thursday April 27, 2023 @02:04PM
(#35732172)
People shouldn't use Authy either due to the fact that they require a phone number.
I and I'm sure many others should rely on open source alternatives. Here's two examples:
Aegis (Android): https://getaegis.app Tofu (iOS): https://tofuauth.com