Forum Discussion
MFA without a Cellphone
Except MS authenticator because users are not allowing to user mobile phone
sathiyatam26 luvsql
Has anyone found a solution for this problem? I am an employee and want to access MFA, but I seek to do so without using a personal cell phone.
- Yes, I have found a solution. I only use a PC and not a tracking device like a dumb (s.m.a.r.t.) phone. Just recently our Company initiated the Microsoft Authenticator. As if the Text or Phone call wasn't enough (sarcasm). My Company would not allow IT to circumvent certain Users, like myself, to use Outlook and the rest as it was previously.
Since I use the PC I searched for a viable way to keep my rights and not tie business things to a personal mobile phone.
IF anyone is interested in this Microsoft Authenticator to PC, then let me know.- Yes i would be interested, ty? This is a joke, FYi! More proof that these tech giants are trying to force ppl into a digital surveillance state, by forcing ppl to have dumb (s.m.a.r.t.) phone, aka data harvesting/tracking device. I will never conform to this. Pernille-Eskebo - demanding that you allow email authentication.. SMS is already to intrusive! Suggestions anyone how to get around this??
There are a number of applications available for Linux, Windows, and macOS that will generate otpauth://totp/ keys like Microsoft Authenticator and Google Authenticator are able to.
I have used KeepassXC on all platforms for this feature - just putting the text in the form of the following URL into the "notes" section will make it work (actually only the "secret" part is needed, the same codes are generated no matter what other info is included). I think KeepassXC also has a dedicated database item for TOTP data, but having it in the "notes" section also works with StrongBox on macOS and iOS, which I also have used. I don't know if keepass2android picks up this info for the Android implementation.
(I used ☉ rather than @ because the filters get rid of properly formatted email addresses)
otpauth://totp/Example:alice☉example.com?secret=JBSWqlmfDPEHPK3PXP&issuer=Example
Key Uri Format
https://github.com/google/google-authenticator/wiki/Key-Uri-Format
https://play.google.com/store/apps/details?id=keepass2android.keepass2android&hl=en_CA&gl=US
One option to consider if the IT department doesn't mind opensource is WinAuth.
- We are a MAC-based environment, and 80% of users are okay with using their mobile for MFA. But I must find an alternative solution for the 20% who refused to use their mobile device.
