If you don't own a smartphone, your phone does not meet the minimum requirements for the Microsoft Authenticator app, or you'd prefer not to use your phone for multi-factor authentication (MFA), you still have several supported options. This article walks through each one so you can pick what works best for you.
Detailed Information
Before You Start: Check Your Phone
If you have a smartphone but aren't sure it's compatible, check its requirements before assuming you need an alternative option.
- iPhone/iPad requires iOS 17.0 or later
- Android requires version 14 or later
If your phone still doesn't meet the requirements after updating, or you don't have a phone at all, see the options below.
Option 1: Passkeys
A passkey is a phishing-resistant sign-in method that replaces a password and an MFA code with a single step. There are two kinds.
Device-Bound Passkey (No Phone Required)
A device-bound passkey is stored on one specific device only. It is not synced anywhere else.
Syncable Passkey (No Phone Required)
A syncable passkey is stored in a password manager and synced across your signed-in devices.
Option 2: Hardware Security Keys
A hardware security key is a small physical device that plugs into a USB port or taps via NFC. It works without a phone, without an app, and without a network connection, and it's one of the most phishing-resistant options available.
How It Works
Insert the key into a USB-A or USB-C port, or tap it against your phone or laptop's NFC reader, then touch the key's metal contact when prompted.
Recommended Models
- YubiKey 5 NFC (USB-A and NFC)
- YubiKey 5C NFC (USB-C and NFC)
- YubiKey 5Ci (USB-C and Lightning, for those who also want to use it with an iPhone)
- Security Key NFC / Security Key C NFC (a lower-cost, FIDO2-only option, if you don't need the extra protocols the YubiKey 5 series supports)
Students
Students who need a hardware security key must purchase one on their own. YubiKeys can be purchased directly from Yubico (External Link) or other online retailers, such as Amazon (External Link) or Best Buy (External Link).
Once You Have a Key
See Add MFA Sign-in Method: Hardware Security Key (FIDO2) to register your key.
Option 3: Third-Party Authenticator App (Last Resort)
DANGER: This is the least secure MFA method available and should only be used as an absolute last resort. Only use this option if all three are true: your phone doesn't meet the Microsoft Authenticator app's requirements, you cannot get a hardware security key, and no other option in this article works for you. OATH-TOTP codes are not phishing-resistant—unlike a passkey or hardware security key, a code can be captured and reused if you are tricked into entering it on a fake sign-in page.
If you have a computer but no smartphone, a phone that doesn't meet the Microsoft Authenticator app's requirements, and no hardware security key, Microsoft Entra ID accepts verification codes from third-party apps that support the OATH TOTP standard, the same standard used to generate 6-digit rotating codes.
Requirements
- The app must generate OATH-TOTP codes (6-digit codes that refresh every 30 to 60 seconds).
- Microsoft Entra ID does not support OATH-HOTP (counter-based codes).
Examples of Compatible Apps
- Google Authenticator
- Twilio Authy
- 1Password (with its built-in authenticator field)
- Bitwarden (with its built-in authenticator field)
- Any other app that supports standard TOTP codes
Options at a glance
| Method |
Phishing-resistant? |
Supported by UMS IT? |
Recommended? |
| FIDO2 Security Key (YubiKey) |
✅ Yes |
✅ Yes |
✅ Yes—if no smartphone available |
| Windows Hello |
✅ Yes |
✅ Yes |
✅ Yes—Windows computer |
| Passkey on macOS |
✅ Yes |
✅ Yes |
✅ Yes—Mac, personal Apple devices |
| Passkey on iOS |
✅ Yes |
✅ Yes |
✅ Yes—iPhone or iPad |
| Google Password Manager |
✅ Yes |
✅ Yes |
✅ Yes—Android and other Google-signed-in devices |
| Third-party password managers (Bitwarden, 1Password, etc.) |
✅ Yes |
❌ No—allowed but not supported |
✅ Allowed; contact vendor for support |
| Third-party authenticator app (OATH-TOTP) |
❌ No |
❌ No—allowed but not supported |
⚠️ Last resort only—see warning above |
Environment
- Applies to all University of Maine System (UMS) accounts
- Windows, macOS, and any device with NFC or USB support
- Does not require a smartphone