Disabling cloud sync on your authenticator app

Publicerad den 12 maj 2023Uppdaterad den 12 feb. 20262 min läsning4 279

Cloud sync allows verification codes from apps like Google or Microsoft Authenticator to be accessible on multiple devices if you're logged into your third-party account.

However, this poses a risk if your account is compromised. For added security, we recommend disabling cloud sync.

Understanding cloud sync and its potential risks

Authenticators (such as Google Authenticator) often have a cloud sync feature. This means that if your third-party account (e.g., Google account, Microsoft account) is logged in on another device, you can view the verification codes from that account’s Authenticator on the other device.

If cloud sync is enabled, and your third-party account (e.g., Google or Microsoft) is compromised or lost, a hacker could also gain access to the verification codes in your Authenticator, posing a security risk.
Recommendation: To reduce risk, we recommend disabling or avoiding the use of cloud sync when using an Authenticator.

How do I disable cloud sync?

Google Authenticator (iOS & Android):

Open Google Authenticator and select the Profile icon in the upper right corner to check if you're logged into a Google account:

  • Not logged in: cloud sync is automatically disabled, and no further action is required.

  • Logged in: cloud sync is enabled by default. Log out of your Google account to disable it.

Microsoft Authenticator

Cloud sync is disabled by default. Please check your profile settings and ensure that you don't enable it in the app settings while using Microsoft Authenticator.

  • iOS: Open Microsoft Authenticator, select Settings, and toggle iCloud Backup off.

  • Android: Open Microsoft Authenticator, select the More button in the upper right corner, select Settings, and toggle Cloud Backup off.

Install the authenticator app on a separate device (optional)

For added security, install your authenticator app on a device without the OKX app installed. This way, if one device is lost, both your OKX account and verification codes are less likely to be compromised.

Note: To better protect the assets of VIP users (account balance ≥ 100,000 USDT, including all sub-accounts), if you have not bound an authenticator, the OKX app will prompt you to bind an authenticator after opening the app or logging in. The reminder will appear on the Promotion page and on the homepage, but it will only pop up once per day (daily reset at 24:00).