Most people today use a smartphone. We live in an app-driven culture, accessing the web and data any place or time. It's convenient. And it's expected to the point that, like electricity or water, a smartphone is now practically required to function in modern society. In fact, my job recently imposed on me in this regard, much to my dislike. But smartphones should be considered a luxury, not a necessity.
This month, there was a change at my employer on the IT side of things. In the 2.5 years prior to this, I had been logging in remotely to my job's server system, using two-factor authentication via a 6-digit code sent by text message to my phone. It worked fine. So the change seemed unecessary.
All of the sudden, I was required to download and install the Microsoft Authenticator app onto my smartphone just to remote into work. Somehow the old text message code method is no longer secure or convenient enough.
This really rubbed my fur the wrong way because I spent a considerable effort earlier this year migrating all my 2FA codes into my phone's built-in password manager. This allowed me to purge the MS Auth app from my phone. It felt good to finally not need to rely on a separate service just for 2FA codes. Now months later, I find myself "forced" to re-install the app!
I bristle at this. What if I'm one of the few digital minimalists who eschew smartphones and instead live with a simple "dumb" phone? Are you telling me I must go maximal and buy an expensive smartphone? Not everyone has a smartphone; they shouldn't be required to function normally. That said, I admit it's not the norm these days to not own a smartphone.
This also bugs me because now I must have the MS Auth app on my phone for one single purpose; only my job uses it. And why should I have a "work" app on my personal phone? I don't want that. I prefer separation and don't use my own phone for anything work related. My employer provides me a work laptop, so why not a work smartphone for work-required apps?
My IT dept. told me I should be able to change a setting on my account that will then let me rely on text message codes again. I haven't tried to change that yet, but upon first looking into it, I was a bit bewildered by the options and settings, unsure what I might break if I "flip the switch."
For now, I've reluctantly installed the 2FA app as required. I disagree with it. I might still look for a technical workaround. There is a practical workaround: work in the office instead of remoting in from home. Of course, that requires commuting in my personal car on my personal time, so installing the app on my phone is less disruptive.