#Authy desktop android
#Authy desktop software
#Authy desktop license
#Authy desktop mac

So we looked for authenticators that left this feature opt-in. Optional backups: The security researchers we spoke with said they don’t recommend backing up or syncing a two-factor authentication account because then your tokens are on the company’s servers, which could be compromised.

Ease of account recovery: Account recovery is the biggest pain point with two-factor authentication, so we looked for apps that offered multiple ways to recover an account, whether through a support line, some type of device backup, or other means.Going with a reliable company helps guarantee continued support for new mobile operating systems and tech support if something goes wrong.

#Authy desktop license

Reliability: Pretty much anyone with an app developer license can make an authentication app, so when it came to security we looked for apps run by well-known companies like Google, Twilio, Cisco, Microsoft, and others.

Usability: An authenticator should make it easy to add new accounts, find existing accounts, and delete unneeded accounts.

#Authy desktop mac

Availability on Windows and Mac can be useful, especially for account recovery, but isn’t a requirement.

#Authy desktop android

Platform compatibility: A good two-factor authentication app should work on both Android and iOS.

You should send reports of phishing attempts to the FTC, but since most people don’t, it’s hard to know how often such phishing happens. The FBI does warn about the risks of both SIM swapping and phishing tools, but two-factor authentication is still effective in protecting accounts. There isn’t a ton of data about the specifics of phishing attempts like this, but the FBI’s Internet Crime Complaint Center received 25,344 reports of phishing in 2017 (PDF).

#Authy desktop software

Unlike with stealing passwords, an attacker needs to grab a two-factor authentication software token in real time for it to be useful. For example, someone could make a fake Gmail login page, email you a link to this page saying your account needs an update, and then direct you to the fake site, where you then log in with your username, password, and two-factor authentication token. Two-factor authentication is still susceptible to more advanced phishing attempts. Two-factor authentication can be a bit mind-boggling if you haven’t used it before, so check out our section on setting up Authy for a visual explanation of how it works.Īlthough two-factor authentication can protect against more basic phishing attempts, where a fake website designed to look like a login page tries to steal only your password, it’s not perfect-no security tool is. It’s run by Twilio, a reputable company that clearly outlines its security practices and updates Authy frequently. The fact that the backup is optional lets you decide what, if any, security risks you’re willing to make in favor of usability. Unlike most other two-factor authentication apps, Authy includes a secure cloud backup option, which makes it easier to use on multiple devices and makes your tokens simple to restore if you lose or replace your phone. When you open Authy you see a grid with large icons that makes it easy to find the account you’re looking for, copy the security token, and get on with your day.Ĭompared with other authentication apps, Authy is also available on more platforms, including iOS, Android, Windows, Mac, and Linux, and it features PIN and biometric protection for the app. This code, which is time-sensitive, can come to you via SMS, or it can be generated by a two-factor authentication app, such as Authy, on your phone. Even if someone gets ahold of your username and password, they still can’t log in to your account without the code. When you log in to an online account with two-factor authentication enabled, the site first asks for your username and password, and then, in a second step, it typically asks for a code.