tldrdailynews.com logo

Google's 2FA feature raises security concerns.

1 min read
Source: Naked Security
TL;DR

Google Authenticator's new feature to backup 2FA data into the cloud and restore it onto other devices has been found to be unencrypted, making the seeds available to Google and anyone with a search warrant for the data. Researchers advise against using the new syncing feature until Google adds a passphrase feature to encrypt the upload before it leaves the device. Google has responded by admitting that it intentionally released the feature without end-to-end encryption but has plans to offer it down the line.

Topics:technologycybersecurity#2fa#authenticator#backup#cybersecurity#encryption#google
Share this article
  1. Google leaking 2FA secrets – researchers advise against new “account sync” feature for now  Naked Security
  2. Google's New 2FA Isn't End-to-End Encrypted, Tests Show  Gizmodo
  3. How to Finally Use Google Authenticator Without Your Phone  Lifehacker
  4. Google on why Authenticator sync isn't E2E encrypted, but option coming later  9to5Google
  5. Why you shouldn't turn on Google Authenticator's cloud sync feature  Ghacks

Want the full story? Read the original reporting

Read on Naked Security