Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
No one should be using Google Authenticator tbh. It doesn't backup your keys at all. Even if you backup all the data on your phone, e.g. via iCloud.

So if you accidentally drop your phone and have to send it off for repair, you'll lose access to all of your accounts. It's not too much of a problem if you kept all the recovery keys, but I'm betting the average user will either end up losing those or not bothering to save them in the first place.

If you use Google Authenticator please - make sure you have your recovery keys printed out, or just move to Authy which does backup your auth codes. You may be able to tell I'm speaking from experience...

Uum, literally right from their update change log "The update brings with it the ability to search for accounts and transfer multiple accounts to another device,"
 
I’m still using hardware keys with Yubikey, have one in my MacBook, another on a set of keys. This will be really convenient for most, but I still prefer to keep third-parties out of login credentials.
 
I hope Apple can match 1Password feature-to-feature and beyond.

I stopped supporting them when they switched to subscription.
 
  • Like
Reactions: !!!
I hope Apple can match 1Password feature-to-feature and beyond.

I stopped supporting them when they switched to subscription.
Then, of course, buy a license as 1Password still supports that with no problem.

It's entertaining that up-thread someone was bashing Google Authenticator for not doing backups, but they think they want to use Apple's solution, that doesn't have backups either? I'd never use Google Authenticator, of course, but I'd never use Apple's solution, either.
 
You Google Authenticator setup won't migrate to your new iPhone, you will need to reset your 2FA in all your websites, thats why I don't use it anymore. Hints, Authy
 
I think the point of this article was that Google was kind of complacent of their authenticator app. Six updates in seven years, with three in six months in an attempt to remain competitive. I'm ready to see Apple enhance the 2FA experience like they have with Maps.
 
So Apples solution ties into iCloud Keychain and automatically propagates to all my current and future iCloud Keychain capable devices (e.g. I can just sign into a new iPhone and the 2FA codes start showing up there too?)
 
Not really. It’s just the seed key and time based. If you saved the QR code when you set up the account, you can readd it
Yep. I save the QR code (screenshot) and back them up on an thumb drive and external HDD.
 
There's no way. You need to:
  • Disable 2FA using the old app.
  • Re-enable 2FA using the new app.
The generated codes are tied to your unique hardware, and each app will use a different algorithm.

If the codes were transferrable, that would make them far less secure. Someone could steal your "profile" and have working codes for all of your accounts on their device. But instead, your device is the only one that will generate the correct codes. That's why it's secure.
I was able to transfer Google Authenticator codes using an encrypted iTunes backup. I don't remember whether it was between devices or back onto the same device. But that capability was totally undocumented.

Edit: Confirming that this isn't hardware-based, other auth apps mentioned above have multi-device support.

People get new phones. Inability to transfer codes makes it easy to get locked out, meaning any site using this has to also have a reset mechanism that'll probably just be email. Ultimately less secure IMO.
 
It’s a little fan boyish to think that just because Apple has done soemthing that everything else is now outdated and irrelevant [not even officially released or fully tested yet]. Other 2FA apps have way more capability and probably security to some degree.
For most things I don't care much whether it's 1P or 3P. But for 2FA, I won't even look at third-party solutions, for a variety of reasons. Security in general is hard, and 2FA is still young. Important things like my bank already have their own 2FA via their native app, which is good, but for most things I don't need 2FA enough to bother with a third-party app for it.

Especially after the terrible experience I had with Google Authenticator, which I only used cause I was implementing 2FA on a website. Perfect example of nerds thinking their users are nerds. There are probably better apps, but whatever.
 
Last edited:
I agree with several others in the thread. If this had been some other company software release, MR probably wouldn't' have given it front page status, and rightfully so. I doin't see why Google is worthy of such with just a software update.
 
I think the point of this article was that Google was kind of complacent of their authenticator app. Six updates in seven years, with three in six months in an attempt to remain competitive. I'm ready to see Apple enhance the 2FA experience like they have with Maps.
Knowing Google, they probably aren't complacent. If something is working great for them, they put even more effort into it. If something isn't popular enough, they stop caring.
 
Especially after the terrible experience I had with Google Authenticator, which I only used cause I was implementing 2FA on a website. Perfect example of nerds thinking their users are nerds. There are probably better apps, but whatever.
What does you implementing 2FA on a web site have to do with Google Authenticator?
 
Then, of course, buy a license as 1Password still supports that with no problem.

It's entertaining that up-thread someone was bashing Google Authenticator for not doing backups, but they think they want to use Apple's solution, that doesn't have backups either? I'd never use Google Authenticator, of course, but I'd never use Apple's solution, either.
They intentionally made 1Password 7 license upgrades super expensive and actively promoting their subscription. Note that 1Password is now mostly feature-complete. There is no reason why anyone will upgrade anymore, subscription is just a money grab.
 
Because years ago Google's app was the go-to for 2FA. And then it stagnated - no cloud backup or multi-device support, which is a pain if you change phones. And the labeling of the codes was limited, too. So I dumped Google and moved over to Authy. Now I can get my 2FA on multiple devices and adding to one syncs to others, too.

Now that Apple is going to make 2FA more mainstream, it seems that Google is finally starting to innovate again. Its great what competition can do!
I started using Google's app around a year ago and it was so easy and smooth to change my phone from Android to iPhone.
I only had issues with Duo and Microsoft Authenticator.
 
Does anyone know if this move from Apple means that they finally start to allow these authenticator 2FA codes for the AppleID 2FA?
 
They intentionally made 1Password 7 license upgrades super expensive and actively promoting their subscription. Note that 1Password is now mostly feature-complete. There is no reason why anyone will upgrade anymore, subscription is just a money grab.

How did you determine that? In the past year, 1Password has added several major new features, including Apple Watch unlock; automatic inline password fill, first in Safari and now in Chromium browsers; and just recently added made their Chromium browser plugins work directly with the application and share unlock status.

Those are all major upgrades and a huge increase in my productivity. It is worth way more than the $60/yr (for a full family) than 1Password charges. It is too bad there are too many people who hate that developers actually want to be paid for their work.
 


Google has updated its 2FA Authenticator app for iOS with a new privacy feature that lets users require Face ID or Touch ID before displaying two-factor account authentication codes.

google-authenticator-app.jpg

Previously, fingerprint or facial authentication was only required when exporting accounts. Now though, upon activating Google's Privacy Screen feature in v3.2.0 of the app, Face ID or Touch ID is needed in order to show newly generated codes.

The authentication requirement can be set to show immediately, after 10 seconds, 1 minute, or 10 minutes. In addition, Google has added a search bar to the top of the app interface to let users search for accounts.

Google Authenticator's previous update introduced a dark mode and the aforementioned account transfer feature. However, the latest improvements are likely to be seen by many Apple device users as verging on the redundant, following the news earlier this month that iOS 15 will include a built-in password authenticator.

When Apple releases iOS 15 in the fall, iPhone and iPad users will be able to natively generate 2FA verification codes for additional sign-in security, so there will be no need for a separate app.

Apple says that you'll be able to set up verification codes under Passwords in the Settings app. And once set up, the codes will autofill when you sign into a site, making the use of two-factor authentication a more streamlined experience than using a third-party method. This feature will be available on ‌iOS 15‌, iPadOS 15, and macOS Monterey.

Article Link: Google Updates Authenticator App Ahead of iOS 15's Upcoming Built-in Code Generator
I wonder why Google doesn't let us use Authenticator on Mac. Why only iPhone & iPad?
 
How did you determine that? In the past year, 1Password has added several major new features, including Apple Watch unlock; automatic inline password fill, first in Safari and now in Chromium browsers; and just recently added made their Chromium browser plugins work directly with the application and share unlock status.

Those are all major upgrades and a huge increase in my productivity. It is worth way more than the $60/yr (for a full family) than 1Password charges. It is too bad there are too many people who hate that developers actually want to be paid for their work.
No, those are small touch ups. The architecture doesn’t change. 1Password is far beyond a minimum variable product already. Most users will not fork out more money to upgrade, therefore they need people on subscription.

The price may feel okay if you have a family, but if you are young and single, their price is exorbitant.
 
That still doesn't change the fact that it has the feature (which the person I was responding to claimed it doesn't).💁‍♂️
I'm the person you were responding to, and I never claimed that. There is no backup feature. If you drop your phone and it stops working, the transfer feature won't help you.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.