Multifactor authentication (MFA) is likely one of the handiest methods to boost safety, and with the rise of apps equivalent to Google Authenticator, the authentication methodology has change into simpler to deploy.
Nonetheless, whether or not because of privateness issues, a scarcity of updates (particularly in relation to open-source choices), or choice, many select to keep away from Google Authenticator.
Thankfully, there’s no scarcity of opponents in the marketplace, every with distinct benefits. Listed here are a few of the prime Google Authenticator options.
Prime Google Authenticator options: Comparability desk
Product title | Pricing | Key Options |
---|---|---|
Microsoft Authenticator: Greatest for a “big-name” choice | Free |
|
Twilio Authy: Greatest for backups and a number of units | 5 cents per profitable verification plus customary charges per channel |
|
Cisco Duo: Greatest for enterprises | Free as much as 10 customers Necessities: $3 per consumer, per thirty days Benefit: $6 per consumer, per thirty days Premium: $9 per consumer, per thirty days |
|
Yubico Security Key: Greatest for a bodily safety key | Yubico security keys can be found in several fashions and configurations, every with various costs. The pricing will depend on components just like the mannequin, connectivity―equivalent to USB-A, USB-C, and near-field communication (NFC)―and options of the safety key |
|
FreeOTP: Greatest for an open-source different | Free |
|
Microsoft Authenticator: Greatest for a ‘big-name’ choice
For these in search of a acknowledged and well-known supplier, I like to recommend Microsoft Authenticator. Accessible for each Android and iOS, Microsoft Authenticator presents an analogous expertise to Google’s, working with each Microsoft and non-Microsoft accounts.
No passwords are required. Accounts are accessible utilizing a PIN code, fingerprint, or face recognition. I personally like how there’s an choice to again up credentials to the cloud, however this requires a private Microsoft account, with iOS customers additionally needing to hyperlink to an iCloud account.
Latest notable enhancements Microsoft has made embrace the power to now show the title of the service, web site, or utility being accessed. This serves as an extra layer of safety you need to use to verify the authenticity of an MFA request.
Why I selected Microsoft Authenticator
As a big, established firm, I really feel Microsoft and the Microsoft Authenticator crew can present a strong stage of assist for customers who’ve questions or points with the product. It can also present a constant stage of updates to supply new options and patch bugs with the software program.
Pricing
- Free and out there for obtain from Apple Retailer or Google Play Retailer.
Options
- Supplies 2FA.
- Supplies passwordless sign-in.
- Helps push notifications.
- Helps MFA.
Microsoft Authenticator execs and cons
Execs | Cons |
---|---|
2FA and MFA present an additional layer of safety. | Not all providers assist Microsoft Authentication for 2FA or MFA, which limits its utilization. |
Simple to make use of with Microsoft accounts and different supported providers. | Customers should have the app put in on their mobile machine to make use of 2FA or MFA, which creates problems if the machine is misplaced or unavailable. |
Consumer-friendly interface with push notification approval for MFA. | |
Helps varied authentication strategies, together with biometrics and cellphone sign-in. |
Twilio Authy: Greatest for backups and a number of units
In order for you assist for a number of units, I recommend Twilio Authy. Though it isn’t as huge or broadly often known as Google or Microsoft, Twilio’s Authy app is likely one of the most spectacular and feature-rich Google Authenticator options. Twilio takes satisfaction in the truth that its app can be utilized anyplace Google Authenticator can be utilized, which means that these making the change gained’t hit any surprising compatibility points.
SEE: Authy vs Google Authenticator (TechRepublic)
It presents its personal distinct benefits with some main quality-of-life options that make it simpler to securely access your knowledge. The app is on the market on a number of platforms, together with iOS, Android, and Chrome, with the power to synchronize your 2FA tokens throughout them so that they’re at all times there if you want them. I respect the way it permits customers to view and edit their units at any time and create securely encrypted backups in case any of them are ever misplaced or stolen.
Twilio supplies common updates for its Authy app, with the latest enchancment involving the delivery methodology of one-time passwords (OTPs). Starting in February 2024, the corporate acknowledged that OTPs could be despatched by way of wealthy communication providers (RCS), a safer methodology than the default quick messaging (SMS) channel, because it’s in a position to make the most of Wi-Fi and mobile.
Why I selected Twilio Authy
Relying on the MFA resolution, customers may very well be locked out of their accounts in the event that they lose their cellphone or different machine. That is the place I discover Twilio actually succeeds. It permits customers to again up all 2FA tokens and restore them within the occasion that they lose their main units. Twilio additionally supplies options to handle a number of units, together with the power to sync and disable future installations for added safety.
Pricing
- Twilio prices 5 cents per profitable verification plus customary charges per channel for its fundamental model that features 2FA, however customized pricing is obtainable for extra superior options.
Options
- 2FA.
- Multidevice sync.
- Comfortable token and backup.
- MFA.
- TOTP.
Twilio Authy execs and cons
Execs | Cons |
---|---|
2FA and MFA assist for varied authentication strategies. | Superior options and customization require the paid plan. |
Comfortable token function eliminates the necessity for a bodily {hardware} token. | |
Simple setup course of and user-friendly interface. | |
Multidevice sync means customers can entry 2FA codes on totally different units. |
Cisco Duo: Greatest for enterprises
For enterprises, my prime advice is Cisco Duo. Some could discover Cisco’s title a considerably stunning inclusion on this record, as many affiliate them extra with routers, web cellphone programs, and different {hardware}. It’s no slouch on the software program facet although, with Duo providing a really sturdy enterprise-level Google Authenticator different.
SEE: Best Authenticator Apps for 2024 (TechRepublic)
As a part of its latest batch of updates, notable additions embrace a public preview for Verified Duo Push. It is a function that gives a larger stage of safety by asking customers for an extra verification code for push requests. Codes despatched by way of SMS textual content message have additionally been streamlined, as codes at the moment are machine-readable to permit cell browsers to finish authentication with out extra consumer intervention.
For me, certainly one of Cisco’s greatest strengths as an MFA resolution is that it’s a part of a collection of software program, which may also be used to arrange and handle different helpful data know-how (IT) performance, equivalent to remote entry and entry management. This function is focused at industrial prospects, nevertheless, and the pricing displays that.
Though most options to Google Authenticator are fully free however doubtlessly comparatively restricted in terms of choices, Duo can supply you a large number in the event you’re prepared to pay for it. The free choice, which Cisco advises is aimed towards people and really small groups, is most akin to what Google presents and might be sufficient for a lot of, though it faces competitors from the likes of Authy. In order for you desktop entry or most of the extra specialised options Duo presents, or you may have greater than 10 customers, you’ll have to pay per consumer. Costs begin at $3 per consumer, per thirty days. That rises to $9 or doubtlessly even greater relying on precisely which options you want.
Since Microsoft Authenticator can be another we recognized, you may be taught extra in our article evaluating Cisco Duo vs Microsoft Authenticator.
Why I selected Cisco Duo
Implementing MFA for enterprises and enormous companies could be complicated. Nonetheless, I’m assured in saying that Cisco is a superb choice to think about due to its Duo Policy Engine. This instrument permits organizations to handle entry throughout totally different customers and ranges of the corporate. Permissions and insurance policies may also be custom-made primarily based on consumer places, remembered units, machine well being, and extra.
Pricing
- Free as much as 10 customers, Necessities is $3 per consumer, per thirty days, Benefit is $6 per consumer, per thirty days, and Premium is $9 per consumer, per thirty days.
Options
- Danger-based authentication.
- SSO.
- Passwordless authentication.
- Full machine visibility.
Cisco Duo execs and cons
Execs | Cons |
---|---|
Complete package deal for full zero-trust entry. | Costly for organizations with numerous customers looking for to make use of superior options. |
VPN-less distant entry to personal assets. | Could require extra setup and configuration, which may very well be difficult for non-technical customers. |
Consumer-friendly and easy-to-use interface for each finish customers and directors. | |
Full machine belief with an endpoint safety examine. |
Yubico Safety Key: Greatest for a bodily safety key
For companies that require having a bodily safety key, I recommend going for Yubico Safety Key. This Google Authenticator different presents one thing totally different. Reasonably than counting on an app put in on a cellphone or desktop, Yubico supplies a bodily key that serves as an authenticator. This key, which is available in USB-A and USB-C variations, will work out of the field with the entire main web sites you’d anticipate it to, in addition to widespread password managers and different software program.
Utilization is easy, the documentation is intensive and simple to grasp, and the important thing itself feels very strong and sturdy. In addition to the usual USB plug connectivity, tap-and-go authentication for cell apps is included. I like how Yubico presents keys with much more options, such because the YubiKey Bio sequence, which integrates biometric safety via the inclusion of a fingerprint sensor. This makes their product adaptable to totally different function necessities, enterprise wants, or use circumstances.
The YubiKey 5 sequence is the most recent model of the product, which delivers extra choices together with the power to go for passwordless authentication, 2FA utilizing a password with an authenticator, in addition to MFA by way of passwordless verification and a PIN. It additionally presents a variety of phishing-resistant authentication protocols, equivalent to FIDO2/WebAuthn and Private Id Verification Smart Card.
Pricing varies relying on the scale of your group and whether or not you’re seeking to purchase the keys with an upfront cost or in the event you select to subscribe. Subscribing can supply some financial savings to bigger organizations, however people and smaller companies who’re assured they aren’t going to lose their keys could want to pay as soon as and be accomplished with it.
SEE: Multi-factor Authentication Deployment Guide (TechRepublic Premium)
Why I selected Yubico Safety Key
I’ve Yubico on this record because of its handy bodily safety keys which have authentication protocols, that are phishing-resistant. It additionally has a vulnerability current with SMS and another strategies of cell MFA. Keys are simple to make use of and are supported by a variety of on-line providers and apps. Safety keys may also be used to safe computer systems and even bodily areas.
Pricing
- Yubico safety keys can be found in several fashions and configurations, every with various costs. The pricing will depend on components, together with the mannequin, connectivity ― USB-A, USB-C, NFC, and others ― and options of the safety key.
Options
- 2FA.
- FIDO2 and U2F assist.
- Multiprotocol assist.
- Bodily safety.
Yubico Safety Key execs and cons
Execs | Cons |
---|---|
Robust authentication with FIDO2 and U2F assist. | {Hardware} safety keys may very well be costly for some. |
Appropriate with varied platforms and providers, enhancing versatility and value. | The necessity to have the bodily safety key for authentication could make them much less handy in comparison with mobile-based authentication strategies. |
Supplies the next stage of safety in opposition to account compromise. | |
Passwordless login, bettering consumer expertise and safety. |
FreeOTP: Greatest for an open-source different
For transparency and privateness lovers, I encourage you to take a look at FreeOTP. One grievance about Google Authenticator is that it’s not open supply, with the related repositories not up to date for a number of years. This isn’t a difficulty with FreeOTP, nevertheless, because it’s fully open supply.
Model 2 is the most recent main launch of FreeOTP. It launched a brand new materials design consumer interface, default branding for main providers, and the power to backup and restore tokens. Three minor updates have since been supplied, eliminating varied bugs and offering slight enhancements.
Accessible on each Android and iOS, this authentication app is comparatively light-weight and minimalist, each by way of consumer expertise and options.
Why I selected FreeOTP
As open-source software program, FreeOTP can present customers with quicker updates and resolutions to issues like bugs and vulnerabilities. It additionally marked itself on my record for its excessive stage of customization that isn’t doable with different personal or proprietary software program.
Pricing
Options
- 2FA.
- Open-source software program
- TOTP.
- HOTP.
SEE: How to Create an Effective Cybersecurity Awareness Program (TechRepublic Premium)
FreeOTP execs and cons
Execs | Cons |
---|---|
Accessible and clear open-source software program. | Customers should have their cell machine with them throughout login, which may very well be much less handy than hardware-based 2FA options. |
Robust 2FA assist with TOTP and HOTP authentication strategies. | The reliance on a cell machine may very well be a priority if the machine is misplaced, broken, or unavailable. |
Cross-platform availability for Android and iOS units. | |
Works offline without having for an web connection throughout authentication, which boosts reliability. |
How do I select amongst Google Authenticator options?
You could need to think about options to Google Authenticator in the event you want the power to customise your methodology of MFA, have to handle a number of units or customers, want utilizing a bodily safety key, or need to work with an organization that has totally different assist choices. Though corporations that supply an MFA resolution can accomplish the identical purpose of offering larger safety in opposition to unauthorized entry to accounts, variations exist for the extent of safety supplied and performance that may have an effect on ease of implementation, use, and upkeep.
In deciding on a product that’s suited to your wants, think about what you may afford in addition to the options and traits most necessary to you. Take into consideration variations in what’s provided for layers of authentication, backup and restore choices, encryption protocols, customization, and assist choices, and instruments to handle permissions for consumer teams.
For instance, people or companies notably susceptible to phishing assaults might want the peace of thoughts that comes with a Yubico phishing-resistant safety key. Equally, corporations with staff that want various ranges of permissions could need to look into Cisco’s Duo Coverage Engine.
Whatever the choice you select, including MFA supplies a layer of safety that may defend you from having to take care of the ramifications of permitting unauthorized entry to your accounts.
For these fascinated by studying extra, additionally take a look at our video function on the Top Google Authenticator Alternatives beneath.
Methodology
When making this record, we thought-about a spread of things to make sure that we’d be bringing you the perfect Google Authenticator options. Among the key areas the place these apps and providers needed to stack up are:
- Status: The software program should come from a reliable, respected firm.
- Reliability: It’s additionally necessary that there’s minimal downtime, to make sure that you’re at all times in a position to securely entry your accounts and knowledge when wanted.
- Options: The apps in our choice supply a spread of options, and every was chosen, partly, for its means to fulfill the wants of particular customers in ways in which Google Authenticator and different options can’t.
- Consumer expertise: Whereas providing a excessive stage of safety and distinctive options is necessary, so is the consumer expertise, so we gave priority to choices which can be simple for customers to make use of.
- Worth: Though a few of our prime picks are free, others aren’t. Nonetheless, the paid choices supply distinctive worth supplied you want and can benefit from their extra options.
Source link