Google Authenticator cloud sync: Google can see the secrets, even while stored(defcon.social)
334 points by Signez | 112 comments
A Mastodon post by Mysk reporting that Google Authenticator's new cloud sync of 2FA secrets is not end-to-end encrypted, so Google can see the secrets.