{"slug": "google-authenticator", "name": "Google Authenticator", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 1, "commenters": 6, "warners": 3, "score": -1.282, "rising": 1.0, "first": "2026-03-28", "latest": "2026-09-17", "why": "Google Authenticator supports local export/import across devices via a QR code", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 1, "neutral": 3, "compare": 0, "warn": 3}, "spark": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0], "listed": false, "loved": [], "caveat": "", "short_quote": "Google Authenticator supports local export/import across devices via a QR code", "icon": false, "domain": null, "github_repo": null, "official_url": "", "pricing": "", "aliases": ["Google Authenticator"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 795903936, "item_id": 49743996, "url": "https://news.ycombinator.com/item?id=49743996", "by": "jakub_g", "date": "2026-09-17", "stance": "recommend", "quote": "Google Authenticator supports local export/import across devices via a QR code", "excerpt": "Yup, having _two_ active devices which are logged in to Google (and possibly other services that you rely on that opt you in to app-based 2FA) + with backups of 2FA is a must at this point. When I buy a new phone, I make it a \"primary\", and keep my old phone as \"backup\". If you're not into cloud-based password/2FA syncing, Google Authenticator supports local export/import across devices via a QR code. For passwords, ", "context": "", "use_case": "2FA with local device transfer", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 795964177, "item_id": 49747761, "url": "https://news.ycombinator.com/item?id=49747761", "by": "karim79", "date": "2026-09-17", "stance": "warn", "quote": "I got burned by Google authenticator in the past and had to jump through hoops to regain access to my accounts", "excerpt": "I'm not saying it's the best option or anything but I use authy authenticator which I have on multiple devices. I got burned by Google authenticator in the past and had to jump through hoops to regain access to my accounts (non Google ones). It was painful. I learned the hard way I suppose.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}, {"id": 795935425, "item_id": 49745964, "url": "https://news.ycombinator.com/item?id=49745964", "by": "emaro", "date": "2026-09-17", "stance": "warn", "quote": "Don't use Google/Microsoft authenticator apps directly.", "excerpt": "Doesn't help obviously if you already lost your phone, but I recommend anyone to use a third party authenticator app. Most services offer to scan a QR code to set up MFA, which can easily be backed up. Don't use Google/Microsoft authenticator apps directly. Personally I use Stratum, but any that allows export/import will do.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}, {"id": 760843441, "item_id": 47552715, "url": "https://news.ycombinator.com/item?id=47552715", "by": "gethly", "date": "2026-03-28", "stance": "warn", "quote": "I know google/ms were worst", "excerpt": "There has been a review of these apps some time ago. I know google/ms were worst and Aegis was on the top of the list(among few others whom i do not remember). I have been using Aegis for aeges :D", "context": "", "use_case": "2FA authenticator", "switched_from": "", "story": "GitHub now requiring 2FA for all contributors,what authenticator apps you using?"}]}], "who": [], "tags": [], "use_cases": ["2fa codes", "totp codes", "2fa with local device transfer", "totp two-factor authentication", "2fa authenticator"], "compared": [{"slug": "aegis", "name": "Aegis", "co": 2, "switched_from": 0, "switched_to": 1}, {"slug": "authy", "name": "Authy", "co": 1, "switched_from": 0, "switched_to": 1}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49742976", "title": "Ask HN: How to recover Google auth after phone stolen?", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=49312465", "title": "TreasuryDirect: Prepare for ID.me \u2013 Your New Way to Log In", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48995030", "title": "Yubikey 5.8: Verified Authorization for the New Era of Identity and AI", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48671468", "title": "LastPass notifies users of yet another data breach", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47530651", "title": "GitHub now requiring 2FA for all contributors,what authenticator apps you using?", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {"warn": 1}, "2026-04": {}, "2026-05": {}, "2026-06": {"neutral": 1}, "2026-07": {"neutral": 1}, "2026-08": {"neutral": 1}, "2026-09": {"recommend": 1, "warn": 2}, "2026-10": {}}, "quotes": [{"id": 795964177, "item_id": 49747761, "url": "https://news.ycombinator.com/item?id=49747761", "by": "karim79", "date": "2026-09-17", "stance": "warn", "quote": "I got burned by Google authenticator in the past and had to jump through hoops to regain access to my accounts", "excerpt": "I'm not saying it's the best option or anything but I use authy authenticator which I have on multiple devices. I got burned by Google authenticator in the past and had to jump through hoops to regain access to my accounts (non Google ones). It was painful. I learned the hard way I suppose.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}, {"id": 795935425, "item_id": 49745964, "url": "https://news.ycombinator.com/item?id=49745964", "by": "emaro", "date": "2026-09-17", "stance": "warn", "quote": "Don't use Google/Microsoft authenticator apps directly.", "excerpt": "Doesn't help obviously if you already lost your phone, but I recommend anyone to use a third party authenticator app. Most services offer to scan a QR code to set up MFA, which can easily be backed up. Don't use Google/Microsoft authenticator apps directly. Personally I use Stratum, but any that allows export/import will do.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}, {"id": 795903936, "item_id": 49743996, "url": "https://news.ycombinator.com/item?id=49743996", "by": "jakub_g", "date": "2026-09-17", "stance": "recommend", "quote": "Google Authenticator supports local export/import across devices via a QR code", "excerpt": "Yup, having _two_ active devices which are logged in to Google (and possibly other services that you rely on that opt you in to app-based 2FA) + with backups of 2FA is a must at this point. When I buy a new phone, I make it a \"primary\", and keep my old phone as \"backup\". If you're not into cloud-based password/2FA syncing, Google Authenticator supports local export/import across devices via a QR code. For passwords, ", "context": "", "use_case": "2FA with local device transfer", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}, {"id": 789056849, "item_id": 49316053, "url": "https://news.ycombinator.com/item?id=49316053", "by": "ButlerianJihad", "date": "2026-08-15", "stance": "neutral", "quote": "I use it with Google Authenticator TOTP.", "excerpt": "Though they recommend their own app, id.me directly supports any standard compatible authenticator app. I use it with Google Authenticator TOTP. It's also SOTA for creating and accepting passkeys on ChromeOS as well as Android. Probably Apple, too! Other built-in available MFA methods include: security key; NFC mobile security key; Push Notifications (id.me app); text message or phone call; and passkeys.", "context": "", "use_case": "TOTP two-factor authentication", "switched_from": "", "story": "TreasuryDirect: Prepare for ID.me \u2013 Your New Way to Log In"}, {"id": 784036369, "item_id": 49002273, "url": "https://news.ycombinator.com/item?id=49002273", "by": "ButlerianJihad", "date": "2026-07-21", "stance": "neutral", "quote": "The most secure auth I use now is Microsoft Authenticator, and Google Authenticator for the TOTP stuff.", "excerpt": "https://utcc.utoronto.ca/~cks/space/blog/sysadmin/YubikeyMostlyDropped You know, I owned several revisions of Yubikeys, and I eagerly set them up on every site that would support them. Sadly, unfortunately, they were \"not compatible enough\" and in fact, it seemed that sites weren't interested in adding or even maintaining existing support, and they fell out of favor with many of us. I really tried! I even went throug", "context": "", "use_case": "TOTP codes", "switched_from": "Yubikey", "story": "Yubikey 5.8: Verified Authorization for the New Era of Identity and AI"}, {"id": 778869665, "item_id": 48679354, "url": "https://news.ycombinator.com/item?id=48679354", "by": "sleepybrett", "date": "2026-06-25", "stance": "neutral", "quote": "In terms of TOTP I just use googleauth and oathtool.", "excerpt": "i mostly stick to firefox I do some management of moving some passwords back and forth (i'm not yet using the firefox extension for apple passwords because i just learned about it).. but because i use firefox on my phone as well.. nbd. In terms of TOTP I just use googleauth and oathtool.", "context": "", "use_case": "TOTP codes", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 760843441, "item_id": 47552715, "url": "https://news.ycombinator.com/item?id=47552715", "by": "gethly", "date": "2026-03-28", "stance": "warn", "quote": "I know google/ms were worst", "excerpt": "There has been a review of these apps some time ago. I know google/ms were worst and Aegis was on the top of the list(among few others whom i do not remember). I have been using Aegis for aeges :D", "context": "", "use_case": "2FA authenticator", "switched_from": "", "story": "GitHub now requiring 2FA for all contributors,what authenticator apps you using?"}]}