Professionally I’ve had situations where Ms authenticator was the only option because the only 2FA they allow is push notifications on the authenticator app.

If a company requires me to install specific apps that may or may not work on my device, I expect that company to provide me with a device that can be set up for their stuff.

I've run two separate phones for nearly 15 years now: my personal phone, and a work-issued phone. The work phone is turned off and left on my night stand as soon as I get home, and only turned on again when I'm getting ready to go back to work. I don't carry it 24/7 as some have been led to believe, for some reason. It's really nice to have that separation. And work pays for it.

We do need to get corps to move away from closed source protocols like MS, Google, Meta and others push notifications though. Those are not in anyway safer and are just basically trap to force people to use their apps

Authy is closed source and owned by Twilio, a publicly-traded company.

Aegis is FOSS.

Do what you will with this info.

Work stuff should be on a work phone.

I don't understand why either the worker or the company would ever allow the use of personal devices for work.

It's a dark pattern but you can use any MFA provider with Microsoft services.

Can't use freeOPT?

So does mine, and Oracle.... But that just means no slop installed

You can use a different authenticator with M$ accounts. Just choose to set up with a different app. Aegis is nice.

Gursd they'll have to buy you a work phone

Old phone with remote desktop.

Works like a charm for many of these types of things. You can also forward notifications into NTFY or Matrix.

Great, so you have nothing to worry about, unless your Graphene phone is rooted. (Which would defeat the entire point)

The article is shit. Microsoft is not blocking any GrapheneOS. It is only blocking rooted phones.

Googles been getting in trouble for requiring Google apps to he certified. So maybe they allow grapheneos through to say see we don't knowing it well be very niche.

Like my other comment said to someone else, so much for Android "OPEN SOURCE" Project, huh? Only OK if its stuffed with Google shit to make money from?

It doesn't matter if they are or not. Google can deem them modified or not secure devices and they can do fuck all about it.

They check through Google Play services, Graphene has play services in a sandbox, it can't see enough to report the security of the device accurately

Don't see how banking on phone is anybless secure then a computer.