Ente Auth vs Proton Authenticator — unclear points about local backup encryption

Proton respects your decisions. If you don’t enable cloud sync, everything is only local.

Does Ente authenticator do the same? Or does cloud upload happen by default?

ente is E2EE Cloud based, Proton seems to be a hybrid of both

Ente has a local only option too btw. Both are excellent options. I think OP is overthinking on which one to choose for some reason.

1 Like

I’m not overthinking this is an important question. I need to understand how to enable cloud backups for my codes on both ENTE and Proton. Specifically, I want to be sure that if I lose my device, I can recover everything by logging into a new device that hasn’t been part of any sync chain. From my research, it seems that on Proton a device doesn’t necessarily need to be in the sync chain, but the cross-device sync option must be active for the backup to be stored on their servers. The official documentation isn’t clear, which is exactly why I’m asking, to clarify how to ensure reliable cloud backups.

oh how come I did not saw it too, I guess it is by default cloud?

Just don’t sign in or sign up. Simply use the app as is offline.

3 Likes

Cloud backups that these services provide are plenty reliable for anyone. If you use local only option, there won’t be any sync. Shouldn’t. If you use sync, it will sync via the cloud of the service provider.

To be clear, I don’t actively use these services but from what I know and understand, this is how it is. I simply use my password manager (Proton Pass) because that works better for me.

You really need to be doing the 3-2-1 backup method with all critical data like this. I would not put my trust into the hands of cloud sync alone into something as important as this.

Maybe once a month, regularly back up your codes, or back them up anytime you make a change. Export them to Proton Drive yourself, and put them on to other pieces of encrypted physical media.

What’s your concern for cloud sync for info like this?

Nothing in particular. Unless it’s just some weird random one off situation that’s completely isolated.

Maybe it is overthinking, and it probably will never happen or occur. But just like security I feel like there’s no such thing as redundancy when it comes to backing up important data like this. I always like to make sure my bases are completely covered.

I’ve had ridiculous situation similar to this (though not exact) happened to me before in the past, and since then I’ve just been pretty much preaching the good word of the 321 method ever since.

1 Like

I appreciate that you are taking the time to respond. However, as you yourself mentioned, you haven’t used or are not familiar with Ente 2FA or Proton 2FA, so you can’t be certain about the points you’re making. While your input is noted, it’s not particularly helpful and could potentially discourage others from responding, even though it isn’t based on actual experience.

I’m specifically asking about two-factor authentication, not password management. This distinction is important because I want to be certain about the cloud backup behavior. Unlike what you suggested, it doesn’t appear that cloud copies are saved by default synchronization between devices or another method must be active. This is precisely why I’m seeking answers: to be sure about this functionality.

1 Like

These are privacy and security companies providing consumer services. I trust that their back end is well maintained and that no data stored within will be lost if you store with them. Of course you can make backups for all your data but if I had all the storage I wanted to have my data stored all on my hardware, I would not be using these services in the first place. Point is, there’s a reason why people use these services. And you can back up whatever you can.

Anyways, that’s what and how I think about it at least.

Thanks! I completely agree that it’s important to keep these backups safe. I’m not planning to rely solely on the cloud backup provided by the services. I’ll also make my own periodic backups.

At the same time, I would like to have the cloud backup option available, and I’m trying to understand how it can be properly activated and ensured. I really appreciate that you highlighted the importance of these backups, as they are very sensitive information, these are the codes that protect access to accounts.

I just want to clarify that my questions aren’t about trusting a company because of its reputation or history. For the purposes of my discussion, I’m trying to understand exactly how Ente 2FA and Proton 2FA work, so I can make a decision based on my own criteria.

I want to be sure about how to keep the cloud backup active and reliable, and, as the previous comment mentioned, I also plan to maintain my own manual backups in the future. These are very sensitive codes that regenerate and are not something you can rely on purely based on the company’s reputation.

So the point isn’t trust in the company, it’s about understanding the actual functionality of these services to meet my requirements. If anyone has official or documented information about this, that’s exactly the kind of input I’m looking for.

I did not say I have not used it. I said I don’t currently actively use it. But I do know how to use it and what they can and can’t do.

Yes I know. But I thought it would behoove you to know that there is 2FA feature/functionality in password managers too that could be good enough.

The way I understand this is, if you use local only storage - there is obviously no sync as there is no account in which you sign in for it. If you do, then everything is synced with your account by the service using their cloud.

How can you recover anything when nothing was synced and if there’s no copy of your 2FA info on the service’s cloud under your account? If you sign in, you automatically get sync.

Perhaps you’re also not using the right word(s). You’re saying “cloud backups”. What exactly does that mean? Do you mean the back up the service automatically takes for their sync functionality? Or do you mean the back up you take so when you upload the file back into the app elsewhere, everything should show up again?

Perhaps I am still not following what you mean. :confused:

Cloud back ups done by you or the service provider?

Thanks for the clarification. Let me try to be very precise so we don’t keep talking past each other.

Yes, I’m aware of that, but it’s not what I’m looking for. I already use a separate password manager, so I’m intentionally focusing on standalone 2FA solutions here.

Regarding terminology: to be absolutely clear, when I say “cloud backup”, I mean the automatic server-side storage performed by the service itself, so that if I sign in on a brand-new device (one that has never been part of any previous sync), all my 2FA codes are fully restored.

I am not referring to:

  • local-only storage, or

  • manual export/import backups (which I do plan to keep separately anyway).

This is exactly where my doubt comes from. From my own research, it does not seem that simply signing in automatically enables cloud storage in all cases. It appears that device sync (or a similar option) must be explicitly enabled for the codes to be stored in the cloud.

That’s the behavior I’m trying to confirm, because I want to be sure that if I lose my phone, I can recover all my codes by logging in on a new device.

Thanks for taking the time to engage in the discussion. I hope I’ve clarified what I mean. At this point, my only remaining question is how to be certain that cloud storage is properly enabled, so that all 2FA codes can be recovered on a new device in case the original one is lost.

I’ll wait for a response from the development team or for input from users who have tested this behavior directly. Any verified information or practical tests would be very helpful—thank you.

2 Likes

Thanks for the clarifications.

This is news to me. So, if this is truly the case, then I’m wrong with my thinking. But I’m surprised and confused why the apps have it this way then. Normally, the expected behavior is to cloud sync by default once you sign in.

Yeah, then you won’t be able to because there is no cloud sync by the service on by default.

You can test it simply. Use and enable it on one device. Sign in elsewhere to see if it shows up there. That’s it.