> Am I the only person who loathes this form of 2FA? Apparently not, but it's always worked for me. Two things, though: 1) sites should support multiple method

> Am I the only person who loathes this form of 2FA? Apparently not, but it's always worked for me. Two things, though: 1) sites should support multiple methods of 2FA. I don't understand why many only let you have one. If I drop my phone in the toilet, I want to have a FIDO token enrolled as backup. 2) some of these implementations, like Google's, are proprietary. I want something universal and standards-based so we're not dependent on a different app for every service we use. > But how have we increased safety when my Team/Outlook phone app requests that I click "approve" on a different app? I'm basically alt-tab'ing and clicking a different button, not really an improvement. It should be on a separate device, or something out of Microsoft's control so they can't screw it up. You're correct, and knowing only what you've told me, I would argue this solution was implemented incorrectly.