Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.
    • neclimdul@lemmy.worldEnglish
      10·
      3 days ago

      Unfortunately, most people that have this fall into two, maybe 3 camps

      1. work installed it and i use it because they said to
      2. work uses proprietary MS mfa so i have to
      3. Actually likes Microsoft?

      source, I’m in camp 2

      • psud@aussie.zoneEnglish
        1·
        13 hours ago

        It’s the only one that offers* backup so you can restore authentication from one phone to another when your main phone fails and it’s not recoverable or falls into the ocean or something

        Only now they say you can only restore to the same phone ecosystem (Apple to Apple, Android to Android) so I’d need to change login settings on about twenty services (including work which requires we use it) before I could change to an iPhone

        * or only one that I could find that did when I was choosing authenticators

        • neclimdul@lemmy.worldEnglish
          1·
          3 hours ago

          Thats actually a pretty conmon feature. Obviously the password managers do though keeping passwords and mfa in the same place kinda negates the multi in multifactor.

          Twilio does as well.

          Don’t know about Google’s, its been like a decade since i used it. It just was the worst.

          Aegis does too but it requires a bit more work to sync the backups to cloud storage or what ever you choose. That’s actually a key feature for a lot of people looking to own their data though.

      • NicoCharrua@lemmy.caEnglish
        7·
        2 days ago
        1. Installed it because it’s the recommended one when signing up for a Microsoft account even though they let you use other authenticators

        Source: most people in my college

        • neclimdul@lemmy.worldEnglish
          2·
          2 days ago

          Yeah i think thats probably a variation of 1 but fair enough.

          For normal TOTP thats the equivalent of “we recommend Edge” which sounds silly to anyone that understands browsers but not everyday knowledge.