Still using Google Authenticator? Here's why you should get rid of it today (2024)

FAQs

Still using Google Authenticator? Here's why you should get rid of it today? ›

Google Authenticator doesn't provide any backup options if you lose or break your smartphone. This means you won't be able to access your accounts when logging in from an unrecognized device or browser.

Google Authenticator doesn't provide any backup options if you lose or break your smartphone. This means you won't be able to access your accounts when logging in from an unrecognized device or browser.

Google Authenticator is a mobile security application based on two-factor authentication (2FA) that helps to verify user identities before granting them access to websites and services. Two-factor authentication makes it less likely that an intruder can masquerade as an authorized user.

2FA can be vulnerable to several attacks from hackers because a user can accidentally approve access to a request issued by a hacker without acknowledging it. This is because the user may not receive push notifications by the app notifying them of what is being approved.

Google Authenticator vs Microsoft Authenticator

Only Microsoft Authenticator supports backup and restore features. Google Authenticator doesn't require a password to access the app, decreasing its security. Google Authenticator is easier to use than Microsoft Authenticator.

TL;DR - An attacker can bypass Google's two-step login verification, reset a user's master password, and otherwise gain full account control, simply by capturing a user's application-specific password (ASP).

If you accidentally uninstall the Authenticator app from your smartphone you will need to re-install it and then run through the setup below. One you have scanned the QR code continue with the setup on the laptop.

Disable your google authenticator using App

Step 1: Click on the profile icon at the upper left corner on the home page to enter into the Security page. Step 2: Disable the Google 2FA Authentication by toggle the button to the left. Step 3: Enter your account login password and existing Google Authenticator Code.

There could be several reasons why some banks have not implemented 2FA as a security measure for their customers' online banking accounts. One reason could be the cost of implementing and maintaining such a system. Banks must invest in new technology and infrastructure to support 2FA, which requires resources.

Are there better alternatives to Google Authenticator? ›

Authenticator apps are not only faster and more reliable than SMS 2FA, they also enforce an additional layer of security, such as a passcode, a password or biometrics (i.e. fingerprint).

Google Authenticator doesn't display icons for websites, nor does it offer online backups, but it's one of few apps that provides a secure, offline method for moving tokens from one device to another. This is helpful if you get a new phone, but it can also function as a manual backup if you own a second device.

Authenticator apps

The authenticator method uses apps such as Google Authenticator, LastPass, 1Password, Microsoft Authenticator, Authy and Yubico. However, while it's safer than 2FA via SMS, there have been reports of hackers stealing authentication codes from Android smartphones.

Compared to the password-only approach, 2FA is significantly stronger and offers better security. That being said, 2FA is also vulnerable to attacks and exploits by hackers. Most notably, hackers use social engineering tactics to bypass 2FA and hack into user accounts.

Man-in-the-middle Attacks

However, instead of directly asking for the two-factor authentication code, the latter method uses a malware to extract user session cookies. Since the cookies contain the user's data and track their activity, hijacking them allows the attacker to bypass 2FA easily.

Authenticator apps are not only faster and more reliable than SMS 2FA, they also enforce an additional layer of security, such as a passcode, a password or biometrics (i.e. fingerprint).

It for sure will not impact your battery, and is not running in the background (the time based codes it creates, are constantly changing though - every 60 seconds - or however long). But the app is only using resources when it is running, and servicing out the codes to you.

Security researchers warn users of Google Authenticator not to turn on the cloud sync feature that Google made available to Android and iOS users recently, as the security of their 2FA data on the cloud isn't guaranteed.