Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.
    • neclimdul@lemmy.worldEnglish
      10·
      2 days ago

      Unfortunately, most people that have this fall into two, maybe 3 camps

      1. work installed it and i use it because they said to
      2. work uses proprietary MS mfa so i have to
      3. Actually likes Microsoft?

      source, I’m in camp 2

      • psud@aussie.zoneEnglish
        1·
        4 hours ago

        It’s the only one that offers* backup so you can restore authentication from one phone to another when your main phone fails and it’s not recoverable or falls into the ocean or something

        Only now they say you can only restore to the same phone ecosystem (Apple to Apple, Android to Android) so I’d need to change login settings on about twenty services (including work which requires we use it) before I could change to an iPhone

        * or only one that I could find that did when I was choosing authenticators

      • NicoCharrua@lemmy.caEnglish
        7·
        2 days ago
        1. Installed it because it’s the recommended one when signing up for a Microsoft account even though they let you use other authenticators

        Source: most people in my college

        • neclimdul@lemmy.worldEnglish
          2·
          2 days ago

          Yeah i think thats probably a variation of 1 but fair enough.

          For normal TOTP thats the equivalent of “we recommend Edge” which sounds silly to anyone that understands browsers but not everyday knowledge.