Proton has addressed a bug in its new Authenticator app for iOS that logged users' TOTP secrets in plaintext, posing a risk if logs were shared. Although the app's synchronization and encryption are secure, the exposure of sensitive information in logs raised concerns among users. The issue has been fixed in version 1.1.1 of the app, released shortly after the bug was reported.
Proton has released Proton Authenticator, a free and open-source two-factor authentication app available across multiple platforms, including Windows, macOS, Linux, Android, and iOS. Designed with a focus on privacy and security, it generates time-based one-time passwords and offers features like encrypted backups, biometric app locking, and easy import/export options. This new tool aims to provide a secure alternative to existing authentication apps that often rely on closed-source models and user lock-in.