Google Authenticator could pose a security risk
The Google Authenticator app has recently been updated. Unfortunately, the update can lead to security risks for your Bitvavo account. Learn more about the risks and how to protect your account in this article.
What did Google change?
Google has integrated the ability to sync devices with each other. When you enable this feature, Google stores your 2FA code (2-factor authentication) in the Google Cloud. The benefit: Users get easy access to their Google account after losing the device with the Authenticator app.
Why can syncing with Google Cloud be risky?
If someone gains access to your login credentials from Google (for example, through a data breach), they gain access to your 2FA codes, too. If a hacker also knows the password of your Bitvavo account, that person can login to your account at Bitvavo.
What should you do now?
To keep your Bitvavo account secure we advise you to not enable the Google Cloud sync for the Authenticator app. If you have already done it, you can easily disable it by following the steps below:
- Open the Google Authenticator app on your phone;
- Tap your profile photo
- Press ‘Use without an account’;
- Tap ‘Continue’.
Done. You can now safely use the Google Authenticator app.
What else can you do to make your account safe?
At Bitvavo, securing your account is our highest priority and we have taken several measures to ensure this. However, there are also some steps you can take yourself to make your account more secure. Read more about it in our article.