Proton Authenticator (standalone app)
Proton made Authenticator apps, with cloud backup.
Hi, I'm currently using Microsoft authenticator for 2FA.
I can't move away from Ms authenticator because cloud backup features.
TOTP authenticator isn't hard to made on mobile/desktop nowdays proton team can leverage existing proton drive space to make these as a cloud backup
Introducing Proton Authenticator: https://proton.me/blog/authenticator-app
-
Jsuser
commented
These buttons in the settings aren't working: "How to use Authentica..." and "Feedback."
-
Elmer Fink
commented
@Mael, some users prefer to have their authentication separate from their passwords so in the event of unauthorised access, not all their details are in the same place.
You dont have to install this if you're already using TOTP in proton pass, you can continue to use that, this is just another option if the user prefers it.
-
Maël Picornell commented
The Proton-Pass app already has 2FA implemented. Why the need of a new app for every single feature?
I dont want to have 20 different Proton Apps on my phone & PC.
-
Aaron R
commented
Yes please, do it. If it does not mandatorily require log in and can be only local if you choose, then even better
-
Clemens Orth commented
exactly this. I would love an authenticator app by Proton.
-
Glenn
commented
I'm currently using Aegis, and I am pretty content with it at the moment
-
Ion Cannon
commented
Take a look at ente auth which is available on iOS (which is my issue with Aegis)
https://ente.io/auth/ -
Sea_Level
commented
Very much appreciate Proton Pass already integrates OTP codes, however, I would feel more comfortable with a separate app as a second factor. Aegis won't work for me.
-
TaperingOFF
commented
Proton pass is awesome there's no need for one anymore?? I just wish the built-in authenticator was accessible to people that can't really afford it...
-
xyz
commented
Ente Auth might be what you're looking for. I'd prefer to not centralize all authentication factors.
-
Privacy101 commented
Proton Pass has TOIP 2fa authentication features...
-
HPZ
commented
Aegis is good
-
Corbin
commented
Aegis works for me for standalone TOTP outside of Bitwarden, but Proton Pass already includes this feature.
-
Niklas Haug
commented
Maybe try Ente Auth
-
rada
commented
For security reason 2fa/totp should not be saved in same place with login and passwords, thats why make sense having and additianl stand alone app to access them. I curently use ente but I would change to proton if such app will be developed as stand alone with browser extension
-
Mikael Dúi Bolinder
commented
The app already exists and is called Proton Pass.
-
Elect-Ron
commented
Others commented Proton already built this into Pass app, but sharing experience with switchover.
- I recently migrated around 25 2FA tokens from MS Authenticator to Proton Pass (PP) TOTP, including multiple accounts with Microsoft, Meta, Google, Xero, GoDaddy, and a bunch of smaller platforms.
- I manually signed into each platform using MSAuth token > navigated to 2FA setting > add/change 2FA to generate a QR > scanned 2FA code using mobile PP app > entered PP code to verify token. Simple.
- I noticed Microsoft, Google, Meta all preference notification of sign-in by alert in their existing apps over 2FA as a 'feature'. It hasn't caused an issue.
- I noticed those platforms and others added PP TOTP 2FA as an additional authenticator, and did not replace their own.
- I noticed many financial platforms (banks, paypal, cashbacks, gift cards) ONLY feature 2FA via SMS, which is very inconvenient with unreliable service and frequently changing mobile numbers. Not a PP problem.
- I appreciate the simplicity that using PP Windows app to fill sign-in credentials automatically copies the TOTP code to Windows clipboard, but do notice that MSAuth app on Android double verifies biometrics before approval, which feels more secure.
- I then wiped devices, reinstalled, and realised Proton Pass first-time sign-in needed the 2FA code from Proton Pass. I luckily was able to find old recovery codes or access would have been lost.
- I have noticed PP Android app and Brower extension both intermittently do not prompt to auto-fill, and worse on Android after I installed Microsoft Swiftkey running in incognito mode.
- My suggestion for Proton Pass (I assume voiced in other tickets) is workflow features to allow other Proton signed in apps to authenticate as large platforms do, particularly if Biometric prompt is available (e.g. feature added to browser plugin currently using fixed 6-digit passcode).TL;DR: Proton Pass 2FA does all Microsoft Authenticator does, BUT MAKE SURE you have Proton recovery codes handy if you migrate Proton 2FA to Proton Pass ot a total lockout is a real risk.
-
DX7 Fan
commented
Proton Pass already does this. The only reason I have Aegis is to authenticate Proton itself.
-
Shawn
commented
I don't see a need for a separate authenticator app when that feature is already included with Proton Pass. I mean you get both credentials and OTP in the same spot. If you really need just an OTP, just create a new entry with JUST the OTP portion in Proton Pass.
-
Tom Youth
commented
From what I've seen concerning this matter, I would advise not using authenticator apps at all. Use security keys. I would probably recommend YubiKey currently.