Multi-factor Authentication (MFA) Options
The following MFA Options have been ranked from the most to least secure.
USB Hardware Tokens
USB hardware tokens generate a unique code that is released only when you correctly enter your username and password then physically touch the device. Hardware tokens are considered the easiest to use and most secure MFA method. If you have been provided with one you'll need to add your hardware token as an MFA method before using it.
Microsoft Authenticator App (BITS Recommended)
The Microsoft Authenticator app is easy to use and is more secure than most other methods. Requiring physical access to the device using the app, it can generate push notification sign-in confirmations, use phishing resistant passkeys, or generate One Time Pins.
3rd Party Authenticator Apps
Like the Microsoft Authenticator App, 3rd Party apps are also capable of generating One Time Pins (OTP) as a second factor for verification. Unfortunately, they lack full integration into the Microsoft Cloud authentication, so they will only do the pin code and not one touch or any other Microsoft specific features.
SMS Text Message (no longer supported for your Brockport account as of February 1st, 2027)
Near the bottom of the list are text messages to phones. Cell phone providers have frequently failed to secure the digital identities of cell phones on their networks. So, it is possible for a malicious person to copy the cell phone identity of another user to receive their phone calls and text messages. That is problematic for identity proofing because it's possible for any one to receive the OTPs meant to prove the identity of another person.
Change your two-step verification method and settings
Phone Call (No longer Supported)
At the absolute bottom is the phone call verification. It has all the same flaws as the text message to people's phones. It is possible for someone other than the intended person to receive their phone calls. Additionally, the phone call method only requires that a user press the # key to confirm. There have been several cases where users were confused or in a hurry and entered the # key without thinking. Then malicious people had access to their accounts.
Change your two-step verification method and settings
Still Need Help?
If you need further assistance, please submit a ticket here: I Need Help, or call the IT Service Desk at (585) 395-5151 Option 1.