Authy
❗This article is a stub. You can help by expanding it.
#appeals channel in either Zulip or Discord to request removal.An article may be flagged as a stub when it is missing major elements needed to make it useful to a reader. You can help by adding missing sections, verifiable sources, relevant company policies and communications, etc. to make the article more complete.
| Basic Information | |
|---|---|
| Release Year | 2008 |
| Product Type | Security, Software |
| In Production | Yes |
| Official Website | https://www.authy.com/ |
Authy is a free mobile app that generates random six-digit tokens to enable two-factor authentication (2FA) for online services. Authy was acquired by Twilio in 2015.
Consumer impact summary
[edit | edit source]
User Freedom
[edit | edit source]Inability to export tokens
[edit | edit source]Authy does not allow the user to export their 2FA tokens to another service in order to "maintain security for our users".[1] This makes it harder for users to switch to another 2FA application, in return forces them to delete all their 2FA tokens and manually add set them up again in a new app.
User Privacy
[edit | edit source]The user account is linked to a mobile phone number. Additionally, there was a data breach in 2024, exposing loads of phone numbers.
Incidents
[edit | edit source]Data breach (July 2024)
[edit | edit source]On July 1, 2024, it was disclosed by Twilio that unauthorized actors accessed customer data "due to an unauthenticated endpoint", but stressed "Authy accounts are not compromised".[2] It would be later discovered the hacker group ShinyHunters breached Authy servers and had access to 33 million phone numbers from Authy.[3]
Removing Desktop App (August 2024)
[edit | edit source]
On March 19, 2024, Authy would no longer support their desktop app.[4] Previously, the EOL date was August 19, 2024, however it was moved to March in order to "streamline our focus and provide more value on existing product solutions for which we see increasing demand".[5] It was noted by TheVerge that M1 and M2 Macs can download the iOS version of the app, though Windows and Linux computers are left unsupported.[6]
See also
[edit | edit source]References
[edit | edit source]- ↑ "Export or Import Tokens in the Authy app Not Supported Objective". Twilio Help Center. Archived from the original on 2026-02-17. Retrieved 2026-03-06.
- ↑ Authy (2024-07-01). "Security Alert: Update to the Authy Android (v25.1.0) and iOS App (v26.1.0)". Twilio. Archived from the original on 2026-03-03.
- ↑ Kovacs, Eduard (2024-07-04). "Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers". SecurityWeek. Archived from the original on 2026-02-13.
- ↑ "User guide: End of Life (EOL) for Twilio Authy Desktop app Overview". Twilio Help Center. 2024-01-01. Archived from the original on 2026-02-08.
- ↑ Karthik, Ashwin (2024-01-08). "Authy authenticator apps for desktop are being discontinued in March 2024". ghacks.net. Archived from the original on 2025-07-24.
- ↑ Roth, Emma (2024-01-08). "Authy is shutting down its desktop app". TheVerge. Archived from the original on 2026-03-09.