In an era where data breaches and credential stuffing attacks make headlines almost daily, passwords alone simply don’t cut it anymore. Two-factor authentication (2FA) has long been heralded as the first line of defense against account takeovers, yet uptake remains surprisingly low. According to the 2024 Verizon Data Breach Investigations Report, compromised credentials contributed to over 61% of breaches last year, underscoring the need for an extra layer of protection.

Traditional 2FA via SMS is vulnerable to social engineering and SIM-swap attacks, where hackers trick carriers into handing over a victim’s number. Authenticator apps, which generate time-based one-time passwords (TOTPs) locally on your device, are a far more secure alternative—yet many mainstream solutions come with trade-offs. Some lock you into a single ecosystem, others plaster your experience with ads, and few offer end-to-end encryption for backups.

On July 31, Proton—a Swiss company best known for its encrypted email and VPN services—launched Proton Authenticator, a free, open-source 2FA app designed to address these shortcomings. Available on iOS, Android, Windows, macOS, and Linux, the app brings Proton’s privacy-first ethos to the critical task of securing your logins.

Unlike Google Authenticator or Microsoft Authenticator, Proton Authenticator offers:

• End-to-end encrypted backups: Your 2FA tokens are encrypted locally before being backed up, ensuring that only you hold the keys to decrypt them.
• Cross-device sync: Choose between Proton’s secure cloud sync (tied to your Proton Account) or iCloud for Apple users, or keep everything local if you prefer.
• No ads, no tracking: Consistent with Proton’s other offerings, the app is free from marketing banners and telemetry—meaning your usage patterns stay your business.
• Offline functionality: All codes are generated on-device, requiring no network connection and mitigating the risk of online interception.

By combining these features under one roof, Proton Authenticator aims to remove the friction that often deters users from adopting stronger security practices.

One of the biggest hurdles when switching authenticator apps is migrating existing tokens—re-scanning QR codes for dozens of accounts can be a tedious chore. Proton Authenticator tackles this head-on: users can import tokens from Google Authenticator, Microsoft Authenticator, LastPass, Bitwarden, and others in a matter of seconds via encrypted file transfer or direct device import.

Once imported, your codes are immediately available across all your devices, securely synced but never exposed in plaintext beyond your own vault. Even if your phone is lost or stolen, you can restore access using your master password or Proton Account credentials without relying on carrier-based recovery methods that SMS 2FA demands.

How Proton Authenticator stacks up

This comparison shows that Proton’s offering pulls ahead in areas where mainstream apps fall short, particularly for users who juggle multiple devices or value encrypted backups.

The launch of Proton Authenticator comes on the heels of Lumo, the company’s new privacy-focused AI chatbot introduced just days earlier. Lumo pledges never to store conversation records or use user data for model training—another testament to Proton’s commitment to user sovereignty over personal information.

Proton’s product roadmap now spans email, VPN, encrypted file storage, password management, AI, and authentication—an ambitious suite aimed at those who view privacy as a fundamental right, not a premium feature. By offering core functionality for free and providing paid tiers for power users, Proton seeks to democratize privacy without compromising on quality.

Account takeovers cost businesses and individuals billions each year, with password reuse and phishing remaining top culprits. App-based 2FA can mitigate these risks by ensuring that stolen credentials alone are not enough to breach your accounts. Proton’s new Authenticator lowers the barrier to entry by making secure backups and multi-device support frictionless—and, crucially, free.

Whether you’re a privacy enthusiast, a small-business owner, or simply someone who values digital security, Proton Authenticator offers a compelling alternative to legacy solutions. By placing user control and transparency at the forefront, Proton continues to push the narrative that robust security and ease of use need not be mutually exclusive.

Getting started

Ready to fortify your online life? Proton Authenticator is available now:

• Download links: Get it for iOS, Android, Windows, macOS, and Linux on the official Proton website.
• Import guide: Follow Proton’s step-by-step instructions to migrate your existing tokens in under a minute.
• Support: Access community forums and detailed documentation if you run into any hiccups.

With this launch, Proton reaffirms its mission: make privacy and security accessible to all, without hidden costs or compromises. If you’ve been delaying 2FA adoption, now is the perfect time to upgrade your defenses—Proton Authenticator has your back, wherever you log in.