Proton Authenticator

le pirate change les mots de passe dans l’application tout les mots de passe

Intégration à proton , navigateur , traduction , synchronisation Windows ?

Very simple app, that does the job without many settings (which is good). The big draws are that it doesn’t rely on the big Tech and you have desktop apps available for all platforms (looking at you Authy…). However, I have some doubts about the security of the app: 1. Not possible to put a password or pin to lock the app. You can activate face id, but then you revert back to the phone code in case it fails. This is very unsettling. It’s not hard for someone to see the phone code over the shoulder, so anyone having your phone might very well be able to open your 2FA app. Update for the second critic based on the answer from the developer. 2. It is supposed to be end to end encrypted, but if the iCloud back up is activated, the database will be automatically opened and display on any other device logged in with your iCloud account, as the encryption key is stored in apple keychain. No need for biometrics or passwords, not even to access the encryption key. Even worse is, if you activate Face ID on your device, you just need to delete the App, reinstall it, and voila, all your codes will be displayed (so Face ID is basically useless). At the very least, you should have the choice to save the encryption key on another password manager. Update: it’s now possible to deactivate the icloud sync and to use a encrypted back up. It’s a good enough work around for point 2 even if it’s not the most practical. Point 1 still stands unfortunately. A shame as it’s really an easy fix. To summarize, if someone has access to your device (even without code!) or you’re hacked, you should assume your MFA won’t offer any additional protection. Better than nothing for sure, but there are other apps without these shortcomings. Therefore I honestly cannot recommend it until this is addressed (a shame as I really like it)