Is it secure to also make the mobile app client the authenticator app?

Most services that support it seem to have a standalone 2FA authenticator app (Microsoft Authenticator, Google Authenticator) instead of integrated authentication in their mobile apps (admittedly, these services are far larger than one-app… Continue reading Is it secure to also make the mobile app client the authenticator app?

Is it secure to also make the mobile app client the authenticator app?

Most services that support it seem to have a standalone 2FA authenticator app (Microsoft Authenticator, Google Authenticator) instead of integrated authentication in their mobile apps (admittedly, these services are far larger than one-app… Continue reading Is it secure to also make the mobile app client the authenticator app?

Is there any security reason to not allow adding authenticators for a certain account?

I have recently added 2FA for my Google account using an authenticator installed on my mobile phone. After doing this, I have realized that it would be nice to also have the authenticator installed in a backup phone.
However, it was not po… Continue reading Is there any security reason to not allow adding authenticators for a certain account?

How can I enter a Google Authenticator Account/Key combination with a URL? [migrated]

I need to enter a key into Google Authenticator but my camera on my smart phone is fuzzy so it can’t read QR codes !!!
I can read the code using other devices. The code evaluates to something like this: http://itunes-store/google-authentic… Continue reading How can I enter a Google Authenticator Account/Key combination with a URL? [migrated]

What is Threat Profile is Microsoft addressing with the MSAL URI format?

Applications built for MSAL 1.0 and MSAL 2.0 have a default application URI of MSAL://GUIDHere/AppName
This is in contrast with what other IDP’s are doing.
Can anyone explain the benefits or drawbacks of this format? (sometimes a "fea… Continue reading What is Threat Profile is Microsoft addressing with the MSAL URI format?