Google has released an update to its popular authenticator app that stores a "one-time code" in cloud storage, allowing users who have lost the device with their authenticator on it to retain access to their 2FA. However, some experts warn that this update could make users more vulnerable to hackers, as securing it in cloud storage associated with the user's Google account means that anyone who can gain access to the user's Google password would then subsequently obtain full access to their authenticator-linked apps. Blockchain security firm CertiK warns of the dangers of using SMS 2FA, which is currently the only authentication option available for a number of fintech and cryptocurrency-related services. (Cointelegraph)
All Comments