Forum Discussion

luvsql's avatar
luvsql
Steel Contributor
Mar 09, 2021

MFA without a Cellphone

This is becoming a bigger issue more and more.  We cannot, as a company, require our Employees to use a personal cellphone to get text codes or install work apps to authenticate our work accounts.  ...
azure
kenturnerturnercom's avatar
kenturnerturnercom
Copper Contributor
Aug 01, 2023
Yes, I have found a solution. I only use a PC and not a tracking device like a dumb (s.m.a.r.t.) phone. Just recently our Company initiated the Microsoft Authenticator. As if the Text or Phone call wasn't enough (sarcasm). My Company would not allow IT to circumvent certain Users, like myself, to use Outlook and the rest as it was previously.
Since I use the PC I searched for a viable way to keep my rights and not tie business things to a personal mobile phone.

IF anyone is interested in this Microsoft Authenticator to PC, then let me know.
it-lett's avatar
it-lett
Copper Contributor
Aug 15, 2023

kenturnerturnercom 

 

There are a number of applications available for Linux, Windows, and macOS that will generate otpauth://totp/ keys like Microsoft Authenticator and Google Authenticator are able to.

 

I have used KeepassXC on all platforms for this feature - just putting the text in the form of the following URL into the "notes" section will make it work (actually only the "secret" part is needed, the same codes are generated no matter what other info is included). I think KeepassXC also has a dedicated database item for TOTP data, but having it in the "notes" section also works with StrongBox on macOS and iOS, which I also have used. I don't know if keepass2android picks up this info for the Android implementation.

 

(I used ☉ rather than @ because the filters get rid of properly formatted email addresses)

 

otpauth://totp/Example:alice☉example.com?secret=JBSWqlmfDPEHPK3PXP&issuer=Example

 

Key Uri Format

https://github.com/google/google-authenticator/wiki/Key-Uri-Format

 

https://keepassxc.org/

 

https://strongboxsafe.com/

 

https://play.google.com/store/apps/details?id=keepass2android.keepass2android&hl=en_CA&gl=US

 

 

 

 

  • GemDito's avatar
    GemDito
    Copper Contributor
    Sep 17, 2023

    it-lett 

     

    One option to consider if the IT department doesn't mind opensource is WinAuth.

     

    https://winauth.github.io/winauth/index.html