This is only going to happen once they added encrypted iCloud backup .. which is due for the next release.
Thanks my info was based off reddit comments which also is how I ended up here but thank you for the more concrete info. Looks like I’ll be looking into ente.
Thank you as well for the info. Much appreciated and again sorry about the necro. I’ve spent the last two days unable to get my current 2FA to even launch effectively locking me out of accounts so it is time to move on for sure.
I did consider using this. So maybe if this issue gets sorted in the future then 2fas could get added?
Hello,
The update with iCloud synchronization has finally arrived on iOS.
Is it end-to-end encrypted in accordance with the requirements of this forum? Thank you to everyone who reported this issue.
According to 2FAS’s GitHub, version 5.4 includes E2EE synchronization, but this needs to be verified.
Yes, it’s time to add 2FAS. I think since this thread is marked as “rejected” Mods just don’t pay attentions to new comments here and they missed this info, so I’ve just created new tool suggestion post, it should be approved soon.
Even with the Auth app, the sync is only available via iCloud. Annoying if you use all kinds of devices. No true cross sync option. Not ideal for me and I suspect many users. That and them not being audited is the only gripe I have. The app is pretty though.
Understand. But for people who use either iOS or Android and want safe desktop access it is great. It’s open source so anyone can read the code. Also, Aegis is recommended here but only for Android so I think 2FAS deserves to be listed here since it meets all the criteria.
Hi Mods! Just giving you head ups that we can reopen the thread and accept 2FAS Authenticator for recommendations.
2FAS Authenticator is open-source free app used to enable two-factor authentication and securely sign-in to online accounts. 2FAS is 100% anonymous and doesn’t require an additional account to use. It offers E2EE cloud backup and can be used offline/locally. 2FAS offers secure browser extension that allows users to access codes across platforms as well as iWatch support.
Why I think this tool should be added
2FAS has been discussed since 2023 and the reason for rejection was the lack of E2EE on iOS. It is confirmed on their GitHub that 2FAS added E2EE with 5.4 version of the app meaning it now meets the PG criteria and 2FAS Authenticator can finally be added to recommendation list.
I see users (including me) were already commenting about that but since this thread was previously marked as “rejected” I think Mods don’t pay much attention to new comments here and they probably just didn’t see this info. I created a new thread but it got marked as duplicate for this original one so trying to let you know here as a direct reply to your comment.
Cheers!
Are you associated with 2FAS? Because your account was created fairly recently and 2FAS is the only thing you’ve posted about.
No I’m not. I guess most people here start as silent observers until they finally find interesting topic to join and this is when they create an account. But I am long time happy 2FAS user so I decided to jump in.
I saw someone was commenting on the update a while back but then nothing followed. Do you know what the process looks like when a tool that was previously rejected later qualifies? Do PG Mods usually reopen a whole discussion or do they review everything internally without any notice here on the forum for us?
I’m not a mod or anything myself, but I’ve seen discussions be reopened before when a tool improves. There is a lot of inertia around previous decisions though so I wouldn’t expect it to be added overnight, even if it meets the criteria. Multiple people will need to take a look and confirm that it’s a solid recommendation.
Yes, definitely. I hope that since it’s been ongoing topic since 2023 and people have already looked into it thoroughly, it will be a quick thing in this case. It’s not like some completely new unknow product from a random company. Hopefully Mods will join the discussion soon.
@jonah have you had a chance to look at this? Cheers!
2FAS is actually really private. You can use it offline but you can also use cloud backups without creating an account. This means 2FAS doesn’t collect your email, your IP and any other personal data you share with a service when you sign up for an account.
It backs up to iCloud and Google Drive, both end-to-end encrypted. 2FAS supports Advanced Data Protection for iCloud, and also adds its own separate E2EE layer for the backup data.
I agree with you that the list of recommendations is outdated and that more options should be added.
Opinions on 2FAS are pretty mixed — some consider it good for privacy, while others consider it bad for privacy. But whatever the opinions are, I really like its approach of accessing TOTP codes through its browser extension without uploading the database anywhere.
Due to my cross-device usage, more specifically multi-mobile usage, I always use cloud-based services for easier synchronization. With locally stored services, I always carry the responsibility of syncing the database across all my devices myself, which, tbh, I forget to do. With a cloud-based MFA app, I can carry either of my two mobiles (I don’t access 2FA from desktop) whenever I want to log into my account.
Edit — Someone has already made a post about adding 2FAS to PG’s recommended list of MFA apps, but it was rejected. Here’s the reply from the team.
To the PG team, have you guys had a chance to look at this?
A post was previously made to add 2FAS on PG recommend MFA list. But, it was rejected with this reason. Hope 2FAS has fixed that issue by now, to make it worthy of being included in PG’s recommended list.
2FAS has improved since then, it now has E2EE and ADP on iCloud. That’s why I’m saying the list hasn’t been updated in a long time.
I can see that 2FAS was rejected in the past, but it has improved since then and the reason for rejection is no longer valid. That’s why I’m saying the list hasn’t been updated in a long time.
In your case, do you use multiple mobile devices and are they a mix of iOS and Android?
I usually have this piece of advice (since people have different opinions, sometimes based on different reasons), if you’re interested in some topic the best approach is to do your own research. In this case, check what the service collects, what it stores, if it’s open source, E2EE, what information about you is collected, etc, focus of everything privacy. Based on that I think 2FAS would be a great recommendation here.
Let’s hope the team considers adding them to the recommended list.