Why does the Google Authenticator app have "obsolete" in its title on Play Store?
Does it work? Can I still use it for two-factor authentication? Is there a preferred method?
Looks like Google has released a new version of Authenticator (as of March 21, 2012) under a new package name:
Different package names means that you can have them both installed simultaneously, but my guess is that Google will eventually remove the old version from the Play Store.
Installing Authenticator 2 without uninstalling Authenticator allows Authenticator 2 to import your currently configured sites.
I've read a few posts from people claiming that Google lost their signing key, and this why they have to release a new app under a new package name. I want to emphasize that there is no evidence to support this claim. While it is true that signing keys cannot be changed with app updates and therefore require a completely new app/package name, a more plausible explanation could be that Google wants to integrate Authenticator more tightly (e.g., shared UIDs, signature permissions) with other apps (see below).
Additional info for those interested:
The signing key used on the old version of Google Authenticator (SHA1 fingerprint:
The signing key used on the new version of Google Authenticator (SHA1 fingerprint:
Update: Google has put up a blog post talking about the new up as well as the upgrade procedure.