Google Plans To Add End-To-End Encryption To Authenticator
Security researchers Mysk highlighted some of these risks in a post on Twitter, noting that “if there’s ever a data breach or if someone obtains access to your Google Account, all of your 2FA secrets would be compromised.” They added that Google could potentially use the information linked to your accounts to serve personalized ads and also advised users not to use the syncing feature until it supports E2EE. Brand pushed back against the criticism, stating that while Google encrypts “data in transit, and at rest, across our products, including in Google Authenticator,” applying E2EE comes at the “cost of enabling users to get locked out of their own data without recovery.”
Read more of this story at Slashdot.