Ente Auth vs Proton Authenticator — unclear points about local backup encryption

[Proton_Team]

@Dima

Can you confirm that the only way to decrypt and access the encrypted backups is through the Proton Auth app?

Not at all, we don’t want to keep user data hostage. We use argon2id to derive the key from the backup password (parameters can be retrieved from the source code or we can just tell you which ones) and with that key one can decrypt the backup using AES-GCM, decrypting into a JSON with the data. Both of these tools are industry standard.

@Dima

Is there (or will there be) any option to create a clear text export, so that users can manually protect and store it for independent access?

Yes, plaintext is available on iOS and Android, and we are going to allow this export to happen on desktop also.