According to a recent report from Nightwatch Cybersecurity, Google’s Authenticator app for Android comes with an unfixed issue that can create a big security nightmare if you have any malware or otherwise shifty apps installed on your device. (The Microsoft Authenticator app for Android also shares the same issue, so don’t switch to that app either, for now.)
Both apps, as of when we wrote this article, don’t use Android’s FLAG_SECURE setting, which prohibits other apps (and you) from taking screenshots. Don’t believe me? Pull up Google Authenticator on Android and take a screenshot by holding the power button + the bottom volume button. Boom. Screenshot. Try that on an app like Authy, and you can hold the buttons for as long as you want — nothing.
While Google will surely fix this issue at some point, Authy is a much better app for managing your 2FA codes, anyway. Not only can you secure the app with extra verification steps—so someone fussing with your unlocked device can’t access your codes without your input—but deploying the app on multiple devices is easy.
See Switch From Google Authenticator to a More Secure 2FA App
According to a recent report from Nightwatch Cybersecurity, Google’s Authenticator app for Android comes with an unfixed issue that can create a big security nightmare if you have any malware or otherwise shifty apps installed on your device. (The Microsoft Authenticator app for Android also shares the same issue, so don’t switch to that app either, for now.)
source https://gadgeteer.co.za/switch-google-microsoft-authenticator-more-secure-2fa-app-such-authy
Comments