@davidnjoku I also work in tech and don't have an authenticator app on my phone (I also use pass-otp on my Debian pc, where it's accessed only after 2fa-ing with my gpg card, so maybe it still qualifies as 2fa?)but I agree that if work has requirements on things that need to be installed on devices, it should be either clearly stated before signing the contract, or it should provide said devices, no matter how common those things are.