Authy: Difference between revisions
No edit summary |
m Removed red links; misc. |
||
| (8 intermediate revisions by 3 users not shown) | |||
| Line 8: | Line 8: | ||
|Website=https://www.authy.com/ | |Website=https://www.authy.com/ | ||
|Description=Authy is a free app that generates random six-digit tokens for two-factor authentication (2FA) for online services. | |Description=Authy is a free app that generates random six-digit tokens for two-factor authentication (2FA) for online services. | ||
|ReleaseYear=2008}} | |ReleaseYear=2008 | ||
}} | |||
'''Authy''' is a free mobile app that generates random six-digit tokens to enable two-factor authentication (2FA) for online services. Authy was acquired by Twilio in 2015. | '''Authy''' is a free mobile app that generates random six-digit tokens to enable two-factor authentication (2FA) for online services. Authy was acquired by Twilio in 2015. | ||
==Consumer | ==Consumer impact summary== | ||
{{Ph-C-CIS}} | {{Ph-C-CIS}} | ||
=== User | ===User freedom=== | ||
The user account is linked to a mobile phone number | ====Inability to export tokens==== | ||
Authy does not allow the user to export their 2FA tokens to another service in order to "maintain security for our users".<ref>{{Cite web |title=Export or Import Tokens in the Authy app Not Supported Objective |url=https://help.twilio.com/articles/19753420684059 |url-status=live |archive-url=https://web.archive.org/web/20260217105416/https://help.twilio.com/articles/19753420684059 |archive-date=2026-02-17 |access-date=2026-03-06 |website=Twilio}}</ref> This makes it harder for users to switch to another 2FA application, in return forces them to delete all their 2FA tokens and manually add set them up again in a new app. | |||
===User privacy=== | |||
The user account is linked to a mobile phone number. Additionally, there was a data breach in 2024, exposing loads of phone numbers.{{Citation needed|date=4 June 2026}} | |||
==Incidents== | ==Incidents== | ||
===Data breach (July 2024)=== | ===Data breach (''July 2024'')=== | ||
On July 1, 2024, it was disclosed by Twilio that unauthorized actors accessed customer data "due to an unauthenticated endpoint", but stressed "Authy accounts are not compromised".<ref>{{Cite web| | On July 1, 2024, it was disclosed by Twilio that unauthorized actors accessed customer data "due to an unauthenticated endpoint", but stressed "Authy accounts are not compromised".<ref>{{Cite web |author=Authy |date=2024-07-01 |title=Security Alert: Update to the Authy Android (v25.1.0) and iOS App (v26.1.0) |url=https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS |url-status=live |archive-url=https://web.archive.org/web/20260303173633/https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS |archive-date=2026-03-03 |website=Twilio}}</ref> It would be later discovered the hacker group ShinyHunters breached Authy servers and had access to 33 million phone numbers from Authy.<ref>{{Cite web |last=Kovacs |first=Eduard |date=2024-07-04 |title=Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers |url=https://www.securityweek.com/twilio-confirms-data-breach-after-hackers-leak-33m-authy-user-phone-numbers/ |url-status=live |archive-url=https://web.archive.org/web/20260213103411/https://www.securityweek.com/twilio-confirms-data-breach-after-hackers-leak-33m-authy-user-phone-numbers/ |archive-date=2026-02-13 |website=SecurityWeek}}</ref> | ||
===Removing | ===Removing desktop app (''August 2024'')=== | ||
[[File:Authy Desktop App EOL.jpg|150px|thumb|right| | [[File:Authy Desktop App EOL.jpg|150px|thumb|right|Pop-up message on March 19, 2024]] | ||
On March 19, 2024, Authy would no longer support their desktop app.<ref>{{Cite web|url=https://help.twilio.com/articles/22771146070299-User-guide-End-of-Life-EOL-for-Twilio-Authy-Desktop-app| | On March 19, 2024, Authy would no longer support their desktop app.<ref>{{Cite web |date=2024-01-01 |title=User guide: End of Life (EOL) for Twilio Authy Desktop app Overview |url=https://help.twilio.com/articles/22771146070299-User-guide-End-of-Life-EOL-for-Twilio-Authy-Desktop-app |url-status=live |archive-url=https://web.archive.org/web/20260208222002/https://help.twilio.com/articles/22771146070299-User-guide-End-of-Life-EOL-for-Twilio-Authy-Desktop-app |archive-date=2026-02-08 |work=Twilio}}</ref> Previously, the EOL date was August 19, 2024, however it was moved to March in order to ''"streamline our focus and provide more value on existing product solutions for which we see increasing demand"''.<ref>{{Cite web |last=Karthik |first=Ashwin |date=2024-01-08 |title=Authy authenticator apps for desktop are being discontinued in March 2024 |url=https://www.ghacks.net/2024/01/08/authy-authenticator-apps-for-desktop-are-being-discontinued-in-august-2024/ |url-status=live |archive-url=https://web.archive.org/web/20250724152419/https://www.ghacks.net/2024/01/08/authy-authenticator-apps-for-desktop-are-being-discontinued-in-august-2024/ |archive-date=2025-07-24 |work=ghacks.net}}</ref> It was noted by TheVerge that M1 and M2 Macs can download the iOS version of the app, though Windows and Linux computers are left unsupported.<ref>{{Cite web |last=Roth |first=Emma |date=2024-01-08 |title=Authy is shutting down its desktop app |url=https://www.theverge.com/2024/1/8/24030477/authy-desktop-app-shutting-down |url-status=live |archive-url=https://ghostarchive.org/archive/pwX53 |archive-date=2026-03-09 |work=TheVerge}}</ref> | ||
==See also== | ==See also== | ||
| Line 34: | Line 36: | ||
==References== | ==References== | ||
{{ | {{Reflist}} | ||
[[Category:{{PAGENAME}}]] | [[Category:{{PAGENAME}}]] | ||
Latest revision as of 04:43, 5 June 2026
❗This article is a stub. You can help by expanding it.
A moderator needs to check the page before this notice can be removed. Visit the noticeboard or the
#appeals channel in either Zulip or Discord to request removal.More info ▼
An article may be flagged as a stub when it is missing major elements needed to make it useful to a reader. You can help by adding missing sections, verifiable sources, relevant company policies and communications, etc. to make the article more complete.
Authy
| Basic Information | |
|---|---|
| Release Year | 2008 |
| Product Type | Security, Software |
| In Production | Yes |
| Official Website | https://www.authy.com/ |
Authy is a free mobile app that generates random six-digit tokens to enable two-factor authentication (2FA) for online services. Authy was acquired by Twilio in 2015.
Consumer impact summary
[edit | edit source]
User freedom
[edit | edit source]Inability to export tokens
[edit | edit source]Authy does not allow the user to export their 2FA tokens to another service in order to "maintain security for our users".[1] This makes it harder for users to switch to another 2FA application, in return forces them to delete all their 2FA tokens and manually add set them up again in a new app.
User privacy
[edit | edit source]The user account is linked to a mobile phone number. Additionally, there was a data breach in 2024, exposing loads of phone numbers.[citation needed (4 June 2026)]
Incidents
[edit | edit source]Data breach (July 2024)
[edit | edit source]On July 1, 2024, it was disclosed by Twilio that unauthorized actors accessed customer data "due to an unauthenticated endpoint", but stressed "Authy accounts are not compromised".[2] It would be later discovered the hacker group ShinyHunters breached Authy servers and had access to 33 million phone numbers from Authy.[3]
Removing desktop app (August 2024)
[edit | edit source]
On March 19, 2024, Authy would no longer support their desktop app.[4] Previously, the EOL date was August 19, 2024, however it was moved to March in order to "streamline our focus and provide more value on existing product solutions for which we see increasing demand".[5] It was noted by TheVerge that M1 and M2 Macs can download the iOS version of the app, though Windows and Linux computers are left unsupported.[6]
See also
[edit | edit source]References
[edit | edit source]- ↑ "Export or Import Tokens in the Authy app Not Supported Objective". Twilio. Archived from the original on 2026-02-17. Retrieved 2026-03-06.
- ↑ Authy (2024-07-01). "Security Alert: Update to the Authy Android (v25.1.0) and iOS App (v26.1.0)". Twilio. Archived from the original on 2026-03-03.
- ↑ Kovacs, Eduard (2024-07-04). "Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers". SecurityWeek. Archived from the original on 2026-02-13.
- ↑ "User guide: End of Life (EOL) for Twilio Authy Desktop app Overview". Twilio. 2024-01-01. Archived from the original on 2026-02-08.
- ↑ Karthik, Ashwin (2024-01-08). "Authy authenticator apps for desktop are being discontinued in March 2024". ghacks.net. Archived from the original on 2025-07-24.
- ↑ Roth, Emma (2024-01-08). "Authy is shutting down its desktop app". TheVerge. Archived from the original on 2026-03-09.