My company is shifting to 2 factor auth through Duo Security. They are telling us to download the app to our cell phones.
They do pay us a $100/month technology allowance to be used for cell phones/internet as we see fit. It is a requirement for us to use our personal cell phones for calling/texting as most positions are remote.
My employees are pushing back a bit, saying it is their personal phone and they don’t want to download an app when they don’t know what that app is actually going to be doing. To be honest, I don’t feel 100% comfortable either but my bosses response when I questioned it was “it is what it is”.
Is this a legit ask? Has anyone used this app before for work on their personal device? Does it do any sort of tracking of phone activity?