This is the answer, more detail: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks. Source: about 2 years ago

Make sure that you back-up the active app-configuration, this way you have an easier way to recover; make sure you are allowed to verify using more than an authenticator, more here. Source: about 3 years ago

I used this when it was still Krypton [0], it worked very well, it just gives you a "Want to log in?" notification on your phone, but for almost anything imaginable (inc SSH). I don't see it used much though. [0] https://krypt.co/. - Source: Hacker News / over 1 year ago

Using your SIM card for MFA when logging in to an SSH server (through paid API requests to a third party) There are ways to use your phone's secure storage capabilities for key storage. I've dabbled with using Krypt.co [1] for this, though that's sadly been deprecated and will at some point be replaced by a paid-for cloud service from Akamai. I'm sure there are other options available as well. A far superior... - Source: Hacker News / almost 2 years ago

Krypton (https://krypt.co), now owned by Akamai (https://akamai.com/mfa) who removed one of the best features, IMO (SSH key on a phone...) does this to an extent... Akamai says it's FIDO2... Have not used it in a while... It is free though until Akamai decides not to give it away... - Source: Hacker News / about 2 years ago

Here's the announcement on the website of the FIDO alliance: https://fidoalliance.org/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign-ins/ I hope this cross device system will be cross platform, but I wouldn't be surprised if you could only choose between macOS/iOS, Chrome/Chrome, or Edge/Edge sync. Funnily enough, a system for signing web... - Source: Hacker News / about 2 years ago

> For the purpose of login in with a private key, I would prefer some browser extension (or built in the browser) that generates a key from a seed (like a crypto wallet) and only does that. This doesn't exist at this point. What about https://www.yubico.com/products/yubikey-5-overview/ or https://cloud.google.com/titan-security-key/ or https://krypt.co/ (before it was acquired, I still use it though) or any of... - Source: Hacker News / over 2 years ago