Privacy Ratings

Two-factor authentication

Google Authenticator privacy rating

Two-factor authentication app from Google that generates time-based and counter-based one-time codes. Codes can optionally be backed up and synced to a Google Account.

United States Five EyesPlatforms: Android · iOS

Summary

Google Authenticator scores 20 out of 100 (grade F) on the two-factor authentication criteria. It meets 1 of 4 criteria: no ads or data sales. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 20 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source. The old open source version on GitHub is no longer maintained.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    Exodus finds no third-party trackers, but the Play data safety listing declares required collection of app interactions, crash logs and device IDs for analytics.

    play.google.com

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free app with no ads. The Play data safety listing declares no sharing with third parties and no data use for advertising.

    play.google.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

Other two-factor authentication

All 18 two-factor authentication