I have two very different MFA tools, one for my employer and one for the company to whom I’m contracted out: Microsoft Authenticator for the former, PingID for

I have two very different MFA tools, one for my employer and one for the company to whom I’m contracted out: Microsoft Authenticator for the former, PingID for the latter. It’s interesting to compare the two, because they operate very differently on my Watch, my primary tool for this. Authenticator sometimes fails because my Watch face goes inactive (and in fact it’s a very clumsy Watch app overall), something that never happens with PingID. Authenticator has the advantage, however, in that it forces me to match one of three integers against the value presented in the browser, and unlike Ping it tells me what I’m authenticating. To some extent this might mitigate the fatigue attack.