A with most things, this has come up before and discussed at length. About authenticators and MS authenticator, see at least these three threads: