If you use Google Authenticator, be careful with the latest update

Google just released a new version of their Authenticator, which is pretty much the most widely used authenticator app out there. There's a big concern with this new version however, and that's cloud synchronization:

With this update we’re rolling out a solution to this problem, making one time codes more durable by storing them safely in users’ Google Account. This change means users are better protected from lockout and that services can rely on users retaining access, increasing both convenience and security.

While it's true this can help someone if they lose the device the authenticator app is on, it also makes it that much easier to hijack anything that uses this method of 2FA. This looks like it's an option you can turn off if you want to, so of course I'd strongly suggest you do so.

I'd also strongly suggest that, if possible, you should have a separate device (perhaps an old phone or old tablet) who's sole purpose in life is to be used for your authentication app of choice. Keep nothing else on it, and use it for nothing else.

Stay safe out there <3