Microsoft Authenticator dropped Apple Watch support in 2023, and Google Authenticator never had it. Here are the 2FA apps that still put codes or push approvals on your wrist.
If you've ever fumbled for your phone at a login screen just to grab a six-digit code, you already know why Apple Watch 2FA matters. A quick wrist glance is faster, and for push-based approvals it's even better — tap once on your watch and you're in.
The problem: the two biggest authenticator apps don't help here. Google Authenticator has never offered an Apple Watch app1. And Microsoft Authenticator, which did have Watch support, discontinued it in 2023, citing watchOS limitations6. That left a real gap for anyone who relied on wrist-based 2FA.
The good news is a handful of apps still step up. Some put TOTP codes directly on your Watch face; others route push-based login approvals to your wrist. The right pick depends on whether you're securing personal accounts or rolling out MFA across a workplace.
> How we earn money: Some links below are affiliate links. If you click through and sign up, we may earn a commission at no extra cost to you. That never influences which apps we recommend — we pick based on features and fit.
| App | Apple Watch | Price | Open Source |
|---|---|---|---|
| 2FAS | Native TOTP on Watch | Free | Yes |
| Duo Security | Push approvals | $3/user/mo | No |
| Raivo OTP | Limited / undocumented | Free | Yes |
| LastPass MFA | Push approvals (historical) | €6.50/user/mo | No |
| Okta Workforce | Push approvals | $2/user/mo | No |
2FAS is the only major authenticator in our database that lists Apple Watch support as an explicit, current feature1. It's free, open-source, and displays your TOTP codes directly on the Watch — no phone interaction needed for a quick glance.
Beyond the Watch app, 2FAS includes iCloud backup, a browser extension for desktop logins, and the kind of transparency you want from software guarding your accounts. The open-source codebase means the security community can audit how tokens are stored and synced1.
For most people securing personal accounts — email, social, crypto, banking — this is the clear top pick. It fills the gap Microsoft left behind without charging you anything or locking you into an enterprise ecosystem.
Verdict: If you want TOTP codes on your Apple Watch and you don't need workplace push approvals, start here.
Duo Security is built for organizations that need to push MFA approvals to employees. Duo Push notifications have historically been actionable on Apple Watch, so your team can approve or deny logins from their wrist2.
Duo goes well beyond simple TOTP. It offers adaptive authentication, device health checks, and FIDO2 support — features that matter when you're protecting corporate data across hundreds or thousands of users2. Pricing starts at $3/user/month.
This isn't the app for your personal GitHub account. But if your IT department is evaluating MFA tools and Watch-based approvals are a priority, Duo is the most established option.
Verdict: Enterprise-grade MFA with push approvals on Watch. Overkill for personal use, right at home in the workplace.
Raivo OTP is an open-source iOS authenticator praised for speed and tight iCloud encrypted sync3. It's free and optimized for iPhone, with a fast, clean interface.
The caveat: Apple Watch support isn't explicitly documented in the same way 2FAS calls it out3. Some users report Watch functionality, but it's less guaranteed and less prominently featured. If you're an iOS purist who values a native-feeling app and encrypted iCloud sync, Raivo is worth trying — just verify Watch behavior on your specific setup before committing.
Verdict: Fast, free, and iOS-optimized. A solid alternative if 2FAS doesn't click for you, but don't assume full Watch parity.
LastPass MFA combines a password manager with multi-factor authentication, adding biometric authentication and contextual factors on top of the vault4. It has historically supported Apple Watch for push approvals.
If your team already uses LastPass for password management, adding its MFA layer is a natural extension — one fewer vendor to manage. Pricing starts at €6.50/user/month4.
The trade-off: you're buying into the LastPass ecosystem, and the company's security history has had bumps. Evaluate whether the vault-plus-MFA combo fits your risk tolerance.
Verdict: Makes sense if you're already a LastPass shop. Otherwise, Duo or Okta offer stronger standalone MFA.
Okta Workforce Identity is an enterprise identity platform with risk-based adaptive MFA and 8,000+ integrations5. Push-based authentication approvals can be actioned on Apple Watch, fitting into a broader identity and access management strategy.
Pricing starts at $2/user/month5, making it competitive with Duo on cost. But Okta's real value is scale — if you need SSO, lifecycle management, and adaptive auth across a large workforce, it's a more comprehensive platform than a standalone MFA tool.
Verdict: Best for large organizations that need MFA as part of a full identity platform. Push approvals on Watch are a feature, not the focus.
Personal accounts? Go with 2FAS. It's free, open-source, and the only app here with explicit, current Apple Watch support for TOTP codes1. There's no reason to pay or overcomplicate things for personal 2FA.
Workplace MFA? Duo and Okta both support push approvals on Watch. Duo is the more established MFA-first choice at $3/user/mo2; Okta is cheaper at $2/user/mo5 but shines when you need a full identity platform, not just MFA.
Already using LastPass? Its MFA add-on is convenient but comes at a premium (€6.50/user/mo4) and ties you to one vendor's ecosystem.
iOS purist who wants to try alternatives? Raivo OTP is fast, free, and open-source3 — just don't count on full Watch feature parity without testing it yourself.
The Apple Watch 2FA landscape is thin, no question. But between 2FAS for personal use and Duo or Okta for the enterprise, there's a workable path for almost everyone — even after Microsoft walked away.
This page was written by the engine and the engine is still on the line. The conversation below picks up where the article stops.
Yes — the picks above are the engine's current verdicts. Ask a sharper version of this question below and you'll get a custom answer with the latest pricing.