Background

During Its Product Launch Spree, Proton Launches 'Authenticator,' A Cross-Platform Open-Source 2FA Tool

Proton Authenticator

Proton, the Swiss privacy-focused tech company known for secure tools like Proton Mail, Proton VPN, and Proton Pass.

This time, it has introduced a new standalone two-factor authentication app. Named 'Proton Authenticator,' this new tool is designed to provide users with an easy yet highly secure way to protect their online accounts using time-based one-time passwords (TOTPs). Available across all major platforms including Android, iOS, Windows, macOS, and Linux, the app represents Proton’s latest effort to expand its ecosystem of privacy-first products.

Unlike SMS-based two-factor authentication, which remains vulnerable to SIM swapping and other attacks, apps like Proton Authenticator generate codes locally on the device.

These codes refresh every 30 seconds, offering a second layer of security that’s nearly immune to phishing and interception.

And unlike many popular 2FA apps, Proton’s solution doesn’t rely on ads, trackers, or user data collection.

Users aren’t even required to create a Proton account to use the app.

What truly sets Proton Authenticator apart from competitors is its open-source nature, encrypted cross-device syncing, and user-friendly import/export options for migrating 2FA codes.

This allows users to switch devices or platforms without losing access to their accounts.

While apps like Google Authenticator, Microsoft Authenticator, and Authy offer some similar features, they often lack full transparency, and most don’t support exporting your TOTP secrets, effectively locking users into their platform.

Proton aims to avoid this trap, emphasizing transparency and data portability.

The app also includes features like encrypted automatic backups and optional app locking via biometrics or PIN, further securing the sensitive authentication data it holds.

According to the company, Proton Authenticator operates entirely offline once set up, ensuring that users' login codes are accessible even without an internet connection.

This launch comes at a moment of opportunity, as Microsoft recently restricted its Authenticator app by removing the autofill functionality, leaving users looking for better alternatives.

While Proton Authenticator doesn’t aim to be a direct one-to-one replacement, it offers a compelling privacy-forward option for anyone seeking to move away from Big Tech’s more closed and surveillance-prone solutions.

Proton says the app will always be free to use across all platforms, aligning with its mission to make strong security accessible to everyone. As with other Proton products, the source code for the app is expected to be made public soon, offering full transparency into how the app handles sensitive user data.

Eamonn Maguire, Head of Account Security at Proton, emphasized that security should never come at the cost of convenience or privacy.

"We’ve developed Proton Authenticator to give users peace of mind," he said, "so their 2FA codes are available wherever they need them, without relying on Google or Microsoft."

The release of Proton Authenticator follows closely behind the company’s launch of Lumo, a privacy-respecting AI chatbot that doesn’t retain conversation logs or use user data for training.

Together, these new offerings signal Proton’s ongoing ambition to give users more control over their digital lives—without having to compromise on privacy or usability.

Published: 
02/08/2025