Twilio kills off Authy for desktop, forcibly logs out all customers

Twilio kills off Authy for desktop, forcibly logs out all customers

Twilio has lastly killed off its Authy for Desktop software, forcibly logging customers out of the desktop software.

In January, Twilio introduced that the Authy desktop apps for Home windows, macOS, and Linux would attain the top of life on March 19, 2024, and can in the end be discontinued in August 2024.

Whereas the desktop apps continued to work previous March, when opened, they confirmed an alert warning that this system had reached finish of life and that customers ought to change to the cell variations instantly.

Authy for desktop warnings
Authy for desktop warnings
Supply: BleepingComputer

This ended about 13 days in the past when Twilio forcibly logged all desktop gadgets out of their Authy accounts and not allowed them to log again in with their telephone numbers.

Authy for desktop users forcibly logged out
Authy for desktop customers forcibly logged out
Supply: BleepingComputer

Those that have continued to make use of Authy for Desktop, even after all of the warnings, have discovered that their 2FA accounts are gone except that they had beforehand synced them with a cell machine.

Nonetheless, those that synced their desktop apps with the cell variations have found that a few of their tokens didn’t appropriately synchronize, making their affiliate accounts inaccessible.

In June, menace actors discovered an unsecured Authy API that may very well be used to confirm if a telephone quantity was related to a sound account.

The menace actors fed tens of millions of telephone numbers into the API, permitting them to construct profiles of 33 million telephone numbers on Authy, which had been then leaked on a hacking discussion board.

Twilio fastened the bug by securing the API and releasing an up to date cell app model. Some consider that Authy desktop customers can’t log in as a result of the desktop app has not been up to date with the brand new repair for the API.

Nonetheless, in June, Authy launched model 3.0, stating it will be the ultimate desktop launch, so we are going to unlikely see one other one.

Replace 8/1/24: Twilio informed BleepingComputer that customers had been logged out as a part of the deliberate end-of-life plans for Authy desktop apps as described right here.

Leave a Reply

Your email address will not be published. Required fields are marked *