3 ms·

Kinda worrying that it doesn't mention anything about how that is secured. Google Authenticator had the fun idea to opt people into unencrypted (beyond whateve

Kinda worrying that it doesn't mention anything about how that is secured. Google Authenticator had the fun idea to opt people into unencrypted (beyond whatever regular google drive files have) cloud backup of 2fa secrets, and it's been exploited in the ways you'd expect.

izacus 2y ago
Both mobile operating systems use e2e encryption for the backups.
- Tepix 2y ago
  Not in the UK for icloud
- stavros 2y ago
  Android doesn't encrypt everything, and the details of what it does and doesn't encrypt are so fiddly that I don't feel confident enough to enable cloud backups.
  - izacus 2y ago
    Android encrypts its whole backup with E2E encryption using your PIN.
    - stavros 2y ago
      It doesn't, it encrypt some of your backup, and isn't entirely clear on which part.
- sneak 2y ago
  No, iOS backups are not e2ee unless you go and opt-in to it, which approximately 0% have done.