Cloud Backup Feature for TOTP Codes Now Available on Google Authenticator App

Google Unveils Major Update to Authenticator App with Cloud Sync Option.

In a major update to its Authenticator app, Google has added an account synchronisation option that allows users to back up their time-based one-time passwords (TOTPs) codes to the cloud.

The update, which also brings a new icon to the two-factor authenticator (2FA) app, finally brings it in line with Apple’s iCloud Keychain and addresses a long-standing complaint that it’s tied to the device on which it’s installed, making it a hassle when switching between phones.

Google’s Christiaan Brand said, “This change means users are better protected from lockout and that services can rely on users retaining access, increasing both convenience and security.” The cloud sync feature is optional, meaning users can opt to use the Authenticator app without linking it to a Google account. However, it’s worth keeping in mind the dangers associated with cloud backups, as a malicious actor with access to a Google account could leverage it to break into other online services.

The update comes after Swiss privacy-focused company Proton unveiled an end-to-end encrypted password manager solution called Proton Pass.

The open source and publicly auditable tool makes use of the bcrypt password hashing function and a hardened version of the Secure Remote Password (SRP) protocol for authentication and also comes with 2FA integration.