/flatpak/proton-authenticator/
Proton Authenticator
Open-source 2FA authenticator
![]()
Proton Authenticator desktop. This Flatpak wraps the official Linux RPM (native WebKit). It is not a vendor-official Flatpak.
Proton Authenticator is GPL-3.0; this Flatpak is a redistribution, not vendor official.

Install
flatpak --user remote-add --if-not-exists thepeoples \
https://flatpak.thepeoples.io/thepeoples.flatpakrepo
flatpak --user install -y thepeoples io.thepeoples.ProtonAuthenticator
flatpak --user install -y thepeoples io.thepeoples.ProtonAuthenticator//1.1.6Optional system install uses sudo flatpak remote-add --if-not-exists --system and sudo flatpak install -y --system. The //version form pins the advertised ostree branch; stable tracks the latest advertised tree.
Verify
- App id
io.thepeoples.ProtonAuthenticator, vendor Proton AG, version1.1.6, license GPL-3.0-or-later - Download 18.0 MB · installed 30.9 MB
- sha256
844c80851e7d2cbe41d18ab9913d5010d19459bea4c8ce773d34bf33a27a3d36 - sha512
88a5c62d0fc78a3eb7230f69a1dd3cf0b2ca5f36f65c6c445e399bec5bc15c7b9c1421e2cd84bb7ed2f969533fa06f12217f6f005c92e5a7754908b79f715767(official source, checked after download fromhttps://proton.me/download/authenticator/linux/version.json) - Ostree key fingerprint
98D786877B6C4E8C6889CBD2E75B1C5B0CB2D841 - Homepage https://proton.me/authenticator
Input scan
Pinned rpm ProtonAuthenticator-1.1.6-1.x86_64.rpm, extracted without install scripts, scanned before wrap. 2026-09-02 14:16 UTC · trivy 0.73.0 · vuln DB 2026-09-01.
Wrap
Layers this remote adds. Gate fails on CRITICAL.
none
gate pass
Vendor
In the upstream package. Not patched here.
none · 1 pkg
Previous scans
Daily Trivy refresh. Current report plus the last 14 full scans; older copies are deleted.
| Scanned | Vuln DB | Version | Wrap | Vendor | Report |
|---|---|---|---|---|---|
| 2026-09-02 14:02 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-02 06:51 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-02 04:58 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-02 04:31 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-02 03:57 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-02 03:44 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-02 01:42 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-01 07:28 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-09-01 06:51 UTC | 2026-09-01 | 1.1.6 | none | none | JSON |
| 2026-08-31 09:27 UTC | 2026-08-31 | 1.1.6 | none | none | JSON |
| 2026-08-31 07:28 UTC | 2026-08-31 | 1.1.6 | none | none | JSON |
| 2026-08-31 06:50 UTC | 2026-08-31 | 1.1.6 | none | none | JSON |
| 2026-08-30 07:29 UTC | 2026-08-30 | 1.1.6 | none | none | JSON |
| 2026-08-30 06:51 UTC | 2026-08-30 | 1.1.6 | none | none | JSON |