Recently, Google Authenticator introduced a cloud sync feature. However, this feature does not undergo end-to-end encryption. As a result, it may potentially expose security risks for users who heavily depend on Google Authenticator, thereby increasing the vulnerability of their account passwords and private keys.
If you are utilizing Google Authenticator for security verification purposes, we highly advise you to disable the "Cloud Sync" feature. Below, you will find the steps to do so for both iOS and Android users:
Scenario 1: Using Google Authenticator while logged in
- Open Google Authenticator (GA) on your device.
- Tap on the profile avatar in the top-right corner.
- Select "Don't log in, use 'Authenticator'" and tap on "Continue."
- This will disable the "Cloud Sync" feature for Google Authenticator.
Scenario 2: Using Google Authenticator while not logged in.
In this case, the cloud sync feature is automatically disabled, and you don't need to take any further action.