Alternative to the Microsoft Authenticator app for people without smartphones?

Question

Alternative to the Microsoft Authenticator app for people without smartphones?

Megan Miller 45

Hi, some people in our company don't have smart phones to download the Microsoft Authenticator app. We received an email from Microsoft about replacing the current SMS method with Microsoft Authenticator. What can we do with our users who do not have smart phones, which means they're unable to use Microsoft Authenticator?

Tricia Hollander 5 Reputation points

2023-09-15T00:31:13.1266667+00:00

I'm not certain, but you may be able to disable this required push to Authenticator by going into Azure AD --> Protection --> Authentication Methods --> Registration Campaign and changing the state from "Microsoft Managed" to "Disabled". Alternatively, it looks like you could apply the non-smartphone users to the "Excluded users and groups" to only force your smartphone users to migrate to Authenticator.
Megan Miller 45 Reputation points

2023-09-29T15:26:35.59+00:00
Thanks for the info. I found some other solutions as well, in case anyone else runs into the same thing:

If you provide a password manager for your users like BitWarden, RoboForm, etc., you can use that as an authenticator app.

You can also use a hardware token, if you wanted to set that up.
etank 25 Reputation points

2023-10-16T17:11:32.88+00:00

QR code isn't standards-compliant, so does not work with Google Authenticator or 1password; isn't this blatantly anti-competitive and monopolistic behavior to force use of Microsoft Authenticator?
etank 25 Reputation points

2023-10-16T17:16:05.8733333+00:00

I should add that it is ALSO actively against the information security interests of users. Forcing us to download multiple authenticator apps, instead of being able to consolidate into a single one of our choice, makes us less secure. We should be able to audit and choose the application we deem most secure. Fewer apps on our employees' smart phones means a smaller potential attack surface for malicious parties to exploit.

If a malicious party knows that every Microsoft user uses Microsoft Authenticator for MFA, then the moment a zero-day is discovered on Microsoft Authenticator it's open-season on all users. If there's a vibrant and fragmented user pool, then only a small fraction of the users using Microsoft Authenticator will be at risk.
SOROKO Jacek 30 Reputation points

2023-10-30T09:50:55.6166667+00:00

I am not planning to download Microsoft Authenticator App on my private phone. I am happy with SMS code as it is less intrusive. If Microsoft will force to use Authenticator App this will be a problem for the companies as they will have to provide the business phones for employees. I am happy with one trusted Authenticator App of my choice on my mobile phone.
Nigel Glasgow 5 Reputation points

2024-01-25T14:31:14.89+00:00

Happy to have the extra layer of security provided by Microsoft, but it comes with a high user frustration and increased tech support payload. Only time will tell if users will adapt without getting angry with IT.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Burghard Britzke 0 Reputation points

2026-06-02T09:44:46.9633333+00:00

I have not been able to activate 2FA. the QR code was "not valid" for my (not Microsoft) Authenticator as some of you wrote before. Has anybody an idea where to get more info? some site?

Your answer

Tricia Hollander 5 Reputation points

2023-09-15T00:31:13.1266667+00:00

I'm not certain, but you may be able to disable this required push to Authenticator by going into Azure AD --> Protection --> Authentication Methods --> Registration Campaign and changing the state from "Microsoft Managed" to "Disabled". Alternatively, it looks like you could apply the non-smartphone users to the "Excluded users and groups" to only force your smartphone users to migrate to Authenticator.
Megan Miller 45 Reputation points

2023-09-29T15:26:35.59+00:00

Thanks for the info. I found some other solutions as well, in case anyone else runs into the same thing:

If you provide a password manager for your users like BitWarden, RoboForm, etc., you can use that as an authenticator app.

You can also use a hardware token, if you wanted to set that up.
etank 25 Reputation points

2023-10-16T17:11:32.88+00:00

QR code isn't standards-compliant, so does not work with Google Authenticator or 1password; isn't this blatantly anti-competitive and monopolistic behavior to force use of Microsoft Authenticator?
etank 25 Reputation points

2023-10-16T17:16:05.8733333+00:00

I should add that it is ALSO actively against the information security interests of users. Forcing us to download multiple authenticator apps, instead of being able to consolidate into a single one of our choice, makes us less secure. We should be able to audit and choose the application we deem most secure. Fewer apps on our employees' smart phones means a smaller potential attack surface for malicious parties to exploit.

If a malicious party knows that every Microsoft user uses Microsoft Authenticator for MFA, then the moment a zero-day is discovered on Microsoft Authenticator it's open-season on all users. If there's a vibrant and fragmented user pool, then only a small fraction of the users using Microsoft Authenticator will be at risk.
SOROKO Jacek 30 Reputation points

2023-10-30T09:50:55.6166667+00:00

I am not planning to download Microsoft Authenticator App on my private phone. I am happy with SMS code as it is less intrusive. If Microsoft will force to use Authenticator App this will be a problem for the companies as they will have to provide the business phones for employees. I am happy with one trusted Authenticator App of my choice on my mobile phone.
Nigel Glasgow 5 Reputation points

2024-01-25T14:31:14.89+00:00

Happy to have the extra layer of security provided by Microsoft, but it comes with a high user frustration and increased tech support payload. Only time will tell if users will adapt without getting angry with IT.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Burghard Britzke 0 Reputation points

2026-06-02T09:44:46.9633333+00:00

I have not been able to activate 2FA. the QR code was "not valid" for my (not Microsoft) Authenticator as some of you wrote before. Has anybody an idea where to get more info? some site?