Proton Authenticator logs full TOTP secrets in plaintext

General
1

https://archive.is/fqw4R

mods on r/privacy removed the post

reply from Proton team:

Thanks for reporting this, this is an oversight in our iOS app, it should only log the entry ID and not the secret (this is the way it is done in our Android app). This will be changed in the next version of the app.
This is fixed in 1.1.1, which is live on the App Store

2

Already discussed here

3

the links post is now removed in the thread u linked, mine contains archive, mods here can merge post if they want, but needs to raise awareness in separate thread so people can update.

4

A post was merged into an existing topic: Introducing Proton Authenticator: Secure 2FA, your way