1. I’m not sure what you mean by this. I have an authenticator app on my desktop which I authenticated. Browser checks authentication against this app similar t

1. I’m not sure what you mean by this. I have an authenticator app on my desktop which I authenticated. Browser checks authentication against this app similar to an authentication app on your phone, except it’s auto provided. I’m sure this nitty gritty to this I haven’t considered but seems doable? What does your app need to trust exactly? That the authentication app I have isn’t a spoof that’s providing bs responses? Can’t I as a user decide the level of security I want for my account? If it’s for work I completely understand, but I really don’t care about most of my online accounts. “To use our service you need to have this trusted authenticator app” seems perfectly reasonable to me. Or if some reason, if we can’t verify that the authenticator app is trustworthy, “we recommend you use this app for your own benefit”. Sure why not I’ll install it. He’ll make it a standard on the OS As for it being compromised, on the other hand isn’t my phone more easily compromised than my local computer sitting at home? 2. I think Okta is very different as it’s a giant store of authentication details of millions of users sitting on the web. It just seems very silly to me. I am sitting right here on my computer and 20 different apps need to independently send me a push to check. And god forbid my phone is dead or I lost it