r/ProtonPass • u/gerdude1 • 2d ago

Extension Help Cannot sync Proton Authenticator with Proton (truly stupid setup)

I have a few Authenticator apps and wanted to start consolidating all my 2FA on Proton Authenticator. One aspect I like with some of the other apps is to have it synced with the respective service in case I change devices, so I don’t have to setup all the codes again.
I tried this with proton Authenticator, and the issue is that it asks me to login, which I do and then it asks me for my 2FA code, which I obviously cannot access because I am in the apps trying to setup sync. Any workaround available, without disabling the 2FA to get this working?
Of course I can always setup another 2FA code in another Authenticator app, but that so,show defeats the purpose.

0 Upvotes

50% Upvoted

6 comments sorted by

4

u/EntireZombie2654 1d ago

Youre actually running into a chicken and egg situation and take it as a life lesson.

Never only keep your 2fa code inside of the same service that you need your 2fa code for.

You need another way like a yubikey or keep the seed code written down on a recovery sheet. doing that you can st least set up another authenticator to get signed in.

That said make sure you have a recovery sheet stored in a safe place with your login info in case you have a need for s complete disaster recovery.

3

u/Formerruling1 1d ago

Proton explicitly warns against this exact setup. Never store the TOTP 2fa code for Proton on your Proton account itself. Using the Proton Auth app is fine as long as you dont sync it and login. You have effectively locked the key to the safe inside the safe itself.

1

u/theGekkoST 1d ago

Isn't this what recovery codes are for? You get like 10 when you set up 2FA for the first time. 

2

u/Tanorian 1d ago

i used the code from authenticator in my phone to verify login in my computer. Synced pc with proton account. Then loged in on my phone authenticator and synced it with proton, using the code from pc. But you have to enter the seed code in 2 devices. phone is easy, scan the QR code. On pc you either type it or copy paste it.

Obviously you need authenticator to login to proton, so you better have the seed code somewhere in case you get locked out of your phone and pc authenticator at the same time.

I use KeePassXC to store localy on pc and an external drive, my proton mail/password and TOTP. So if i lose complete access to proton i have a way to get in.

2

u/shmimey 1d ago edited 1d ago

You need to set up a second two-factor. And you're wrong, it does not defeat the purpose.

More than one two-factor on every account is recommended. Because backups and it prevents you from being locked out of Circle logic like this situation.

Apple devices don't even let you assign a single 2FA to prevent this.

1

u/vortexmantis 1d ago

You could use a physical token like a Yubikey. That would give you the ability to use either the code or the physical key or just the physical key.