2FA methods supported by Okta
Adding two-factor authentication is one of the most effective ways to protect your Okta account. With TOTP support, you can generate Okta verification codes directly in the Authenticator App.
SMS
Okta can send a one-time verification code to your phone via text message.
Phone call
Okta can call your phone and read out a verification code.
Okta can deliver a one-time verification code to your email address.
Authenticator app (TOTP)
Okta lets you use time-based one-time passwords, so you can generate verification codes in an authenticator app on your device — no network or SMS needed.
Hardware token
Okta supports a dedicated hardware token for generating codes.
Security key (U2F)
Okta works with hardware security keys using the U2F/FIDO standard.
Proprietary app
Okta offers its own companion app for approving sign-ins.
Okta 2FA — Frequently asked questions
Does Okta support an authenticator app?
Yes. Okta supports time-based one-time passwords (TOTP), so you can add it to the Authenticator App and generate verification codes right on your device.
Which two-factor authentication methods does Okta support?
Okta currently supports: SMS, Phone call, Email, Authenticator app (TOTP), Hardware token, Security key (U2F), Proprietary app.
Is it free to generate Okta codes with the Authenticator App?
Yes. The Authenticator App is free to download, and generating Okta verification codes does not require an account or sign-up.
More Identity services that support 2FA
This page is for educational purposes only. We are not affiliated with or endorsed by Okta. All trademarks and product names are the property of their respective owners and are used solely for identification.