4 ms·
I'm running Office 365 with the only thing is supports - Microsoft's app. Which is not infallible: https://lolware.net/2017/08/01/capturing-mfa-logons.html htt
by technion 9y ago
I'm running Office 365 with the only thing is supports - Microsoft's app. Which is not infallible:
https://lolware.net/2017/08/01/capturing-mfa-logons.html https://lolware.net/2017/08/01/capturing-mfa-logons.html
Edit: I've always felt strongly about having things like the AWS logon connected to a dedicated and otherwise unused mailbox, it helps minimise the risk discussed here.
- ownagefool 9y agoLast time I used Office 365 you could disable the push requirment when configuring the auth app, that would then allow you to use alternatives. I used freeotp with my o365. :)
- ihattendorf 9y agoYep, just set it up a couple days ago. Supports Google Authenticator/Authy/etc.
- tokenizerrr 9y ago> Edit: I've always felt strongly about having things like the AWS logon connected to a dedicated and otherwise unused mailbox, it helps minimise the risk discussed here. Do you check this mailbox frequently? If not, won't you miss important communication?
- 0xffff2 9y agoI'm also using Office 365, but I use the same TOTP app that I use for every other 2-factor service I use...