Software:Authy

From HandWiki
Authy
Authy logo
Original author(s)Authy Inc.
Developer(s)Twilio
Initial releaseAugust 2012
Operating system
TypeTwo-factor authentication
LicenseProprietary
Websitewww.authy.com

Authy (also known as Twilio Authy)[1] is a two-factor authentication (2FA) mobile app. Originally released in 2012 by Authy Inc., the app was acquired by American communications firm Twilio in 2015.[2][3] Authy provides online backup for security tokens, and users must register an account with a phone number prior to using the app.[4] It supports the Android and iOS operating systems.[5] In 2022 and 2024, Authy experienced data breaches involving user accounts and phone numbers.[6][7]

History

Authy Inc. founders Daniel Palacio and Gleb Chuvpilo were accepted into the Y Combinator startup accelerator program in late 2011.[8] The initial version of Authy was released in August 2012.[2] In 2014, Authy Inc. raised $3 million in a series A round.[9][10] At the time, Authy charged companies for its API, which allowed websites to validate each login with a one-time password (OTP) delivered to the user's device. Companies that implemented the API were billed every time a user signed up or logged in via Authy.[9] Twilio acquired Authy Inc. in February 2015 and indicated that Authy would be integrated with Twilio's API.[3][11]

Authy maintained a Chrome App and browser extension for Google Chrome from April 2014 until the deprecation of the Chrome App platform in 2020.[12][13] The Windows and macOS desktop applications for Authy were released in 2017,[14] followed by a beta version of the Linux application in 2020.[15] Authy discontinued its Windows, macOS, and Linux applications in August 2024.[5][16] Because Authy did not include a data export feature, users who switched to another two-factor authentication (2FA) app had to disable 2FA on each of their accounts before re-enabling it with the new app.[5][17]

Security incidents

Twilio employees were targeted by an SMS phishing campaign in August 2022 that resulted in a data breach impacting 209 of Twilio's client organizations, after which the hackers compromised 93 Authy accounts and linked them to their own devices.[6][18][19][20] In a July 2024 data breach, hacker group ShinyHunters used an unsecured Twilio API to collect the phone numbers of 33 million Authy accounts.[7][21][22][23]

See also

References

  1. ↑ Speed, Richard (February 15, 2024). "Twilio reminds users that Authy Desktop apps die in March". https://www.theregister.com/software/2024/02/15/twilio-reminds-users-that-authy-desktop-apps-die-in-march/558751. 
  2. ↑ 2.0 2.1 Finley, Klint (July 31, 2013). "Startup Vows to Save Everyone From the Epic Hack". Wired. https://www.wired.com/2013/07/authy/. Retrieved August 22, 2026. 
  3. ↑ 3.0 3.1 Hesseldahl, Arik (February 24, 2015). "Twilio in Deal to Acquire Security Startup Authy". https://www.vox.com/2015/2/24/11559324/twilio-in-deal-to-acquire-security-startup-authy. 
  4. ↑ Key, Kim (March 19, 2026). "Authy Review: Sleek and Reliable, But Short on Flexibility" (in en). https://www.pcmag.com/reviews/twilio-authy. 
  5. ↑ 5.0 5.1 5.2 Roth, Emma (January 8, 2024). "Authy is shutting down its desktop app". https://www.theverge.com/2024/1/8/24030477/authy-desktop-app-shutting-down. 
  6. ↑ 6.0 6.1 Newman, Lily Hay (August 26, 2022). "Why the Twilio Breach Cuts So Deep". Wired. https://www.wired.com/story/twilio-breach-phishing-supply-chain-attacks/. Retrieved August 22, 2026. 
  7. ↑ 7.0 7.1 Roth, Emma (July 3, 2024). "Twilio alerts Authy two-factor app users that "threat actors" have their phone numbers". https://www.theverge.com/2024/7/3/24191791/twilio-authy-2fa-app-phone-numbers-hack-data-breach. 
  8. ↑ Shontell, Alyson (December 7, 2011). "This Russian Model Is Headed To Y Combinator". https://www.businessinsider.com/startups-y-combinator-2012-12. 
  9. ↑ 9.0 9.1 Kolodny, Lora (September 8, 2014). "Authy Raises $3M to End Nude-Photo Theft And Other Fraudulent Hacks". https://www.wsj.com/articles/DJFVW00120140908ea98b2v69. 
  10. ↑ Kim, Eugene (September 9, 2014). "A Group Of High-Profile Investors Is Making A $3 Million Bet On A Startup That's Trying To Kill Passwords". https://finance.yahoo.com/news/group-high-profile-investors-making-172146677.html. 
  11. ↑ Chapman, Lizette (February 24, 2015). "Twilio Buys Authy in Its First Acquisition". https://www.wsj.com/articles/DJFVW00120150224eb2og36a4. 
  12. ↑ Lardinois, Frederic (April 28, 2014). "Authy Brings Two-Factor Authentication To The Desktop". https://techcrunch.com/2014/04/28/authy-brings-two-factor-authentication-to-the-desktop/. 
  13. ↑ "Authy for Chrome App & Extension End of Life" (in en). February 21, 2020. https://www.twilio.com/en-us/blog/products/authy-chrome-app-extension-end-life. 
  14. ↑ Schwan, Ben (July 28, 2017). "Authy: App für Einmalpasswörter auf dem Mac" (in de). https://www.heise.de/news/Authy-App-fuer-Einmalpasswoerter-auf-dem-Mac-3785746.html. 
  15. ↑ "Announcing General Availability of Authy Desktop for Linux" (in en). June 11, 2021. https://authy.com/blog/announcing-general-availability-authy-desktop-linux/. 
  16. ↑ Abrams, Lawrence (August 1, 2024). "Twilio kills off Authy for desktop, forcibly logs out all users" (in en-us). https://www.bleepingcomputer.com/news/security/twilio-kills-off-authy-for-desktop-forcibly-logs-out-all-users/. 
  17. ↑ Toulas, Bill (January 8, 2024). "Twilio will ditch its Authy desktop 2FA app in August, goes mobile only" (in en-us). https://www.bleepingcomputer.com/news/security/twilio-will-ditch-its-authy-desktop-2fa-app-in-august-goes-mobile-only/. 
  18. ↑ Page, Carly (August 26, 2022). "Twilio says breach compromised Authy two-factor app users". https://techcrunch.com/2022/08/26/twilio-breach-authy/. 
  19. ↑ Szpytek, Peter Hunt (August 26, 2022). "Hackers breached 2FA accounts of some Authy users, Twilio confirms". https://www.digitaltrends.com/phones/authy-hackers-breach-two-factor-authentication-2fa-codes/. 
  20. ↑ Page, Carly (October 28, 2022). "Twilio hack investigation reveals second breach, as the number of affected customers rises". https://techcrunch.com/2022/10/28/twilio-june-data-breach/. 
  21. ↑ Abrams, Lawrence (July 3, 2024). "Hackers abused API to verify millions of Authy MFA phone numbers" (in en-us). https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/. 
  22. ↑ Fadilpašić, Sead (July 4, 2024). "Twilio confirms hackers accessed Authy user phone numbers" (in en). https://www.techradar.com/pro/security/twilio-data-breach-gets-a-whole-lot-worse-as-it-confirms-hackers-accessed-authy-user-phone-numbers. 
  23. ↑ Franceschi-Bicchierai, Lorenzo (July 3, 2024). "Twilio says hackers identified cell phone numbers of two-factor app Authy users". https://techcrunch.com/2024/07/03/twilio-says-hackers-identified-cell-phone-numbers-of-two-factor-app-authy-users/. 



Retrieved from "https://handwiki.org/wiki/index.php?title=Software:Authy&oldid=4635357"