Authy looks like a great solution - especially for laymen, in order to simplify complexities - but I have some nagging concerns re privacy & security, especially when sensitive data is hosted "on cloud".
It's encouraging to see (some? most? all?) Authy source hosted @ GitHub, but has Authy actually had a PenTest or security review by an independent 3rd-party, and have the findings been made public?
Where is the data stored, how is it encrypted at rest & how has vulnerabilities been dealt with? If CVE='none', then that sets all sorts of alarm bells off.
I know some of this is addressed by their blog post, but would like a 2nd opinion to verify