Okta Verify
Reviews and Complaints

The phone app does what it's supposed to - works great. The watch app works great if your company has Push Verify enabled. My company does not, so I must manually enter the code. The issue with the Watch App in that scenario is that the watch app is utilizing the "Dynamic Type" settings on the watch. I have my watch text size set at the highest possible setting and only 3 numbers of the code display on the Watch - forcing me to use the phone app and rendering the Watch app useless. Hopefully they will address this in a future release.

I just tried testing out the push approval process that was allegedly fixed in version 2.3. It's still an issue. Duo doesn't have this issue, so I'm not sure why it's so difficult to resolve for Okta.

Reproduction steps:

1. Turn off iPhone
2. Turn on iPhone and unlock it. Then lock it.
3. Authenticate to Okta in a Chrome Incognito window
4. At MFA page, select "Push to device"
5. Notice that push approval never shows up on the lock screen
6. Unlock phone and open Okta Verify. Notice that the push approval shows up in the app and works when selected.

Horrible app and service. Forced to download the app because the codes they texted me were not working when I tried to set up my account. Barcode then wouldn't scan, nor would it create the manual code. Through some miracle, had them text me a link that finally created a code that worked. Thought I could delete the app as it's a waste of space. But no, you need to keep the crappy app or you won't be able to get into your account. Now I'm locked out of my account and have to wait for tech support to do some kind of reset. Horrible app, horrible company, horrible system.

Update: this app just ads another layer of complexity for Kronos, making it even slower and more of a boon to use. I am shocked Kronos has stayed in business this long with such horrible applications and interfaces.

So far this isn’t working for me, Kronos shows the QR code we on your phone, but to link to Kronos you need to take a picture. Hopefully once it works as intended this is just another useless app we never have to use past verifying... something. Not sure why Kronos couldn’t just include this software, but I don’t think they have any idea how to make/run/manage an application.

I’m on ios 15.4.1 and just updated the app today with the update that’s changelogged from a day ago, but as of a couple of days ago I stopped getting push notifications. The help page “Troubleshoot missing Okta Verify push notifications on iOS devices” points out a diagnostic section, but that section says everything is fine on all okta apps, and they aren’t on any of them. I don’t want to have to unlink and relink 6 of my Okta’s to reinstall to fix the push notifications. Those push notification-responses are what made me love Okta over other MFA solutions, so I would’ve otherwise given a 5

After resetting and restoring my iPhone, I found the app becomes totally useless. It asks you to scan the barcode which you will never get since you need the push verification before getting barcode. It is a dead loop!

This kind of workflow shows how inconsiderable the app designers are and I will strongly suggest my company to withdraw the deal with OKta.

Image you cannot receive an important email outside the company network due to the mistake from the third party app. Everyone who sees my comment please suggests your company to end the business with Okta because OKta itself hurts business.

The verification/authentication messages show up on my iPhone. They will also show on my Apple Watch, but only sporadically. I’d say less than 20% of the time.

This is unfortunate as it is more convenient on my watch to scroll up and select “Yes, it’s me” (though not having to scroll would be easier). Having to pick up and fiddle with my phone is not convenient for work.

Though I have my work account set up on my iPhone, when I click on the app on my watch, it just says “Add account”. Obviously, something is set up as I do get some verification requests on my phone.

Great app when it works.

Every time I respond to a watch notification, I end up waiting before realizing the authorization will never go through. Then I try to launch the okta verify app on my watch, but it often has no codes visible. Lastly, I pull out my phone, which no longer shows the notification on the lock screen because I "responded" on my watch. So I have to go all the way into the app to accept the authorization request. The simplicity is great when it works, but in my experience, it hardly ever works. Extremely embarrassing if I'm running a meeting and attempt to authorize via watch. People start to criticize the Apple Watch, even though it's Okta's fault.

Company uses Okta verify. I have downloaded and used in the past but at some point the app just stopped opening when needed. I deleted from my phone and re-downloaded and installed from app store and it still attempts to open, then closes.

Migrated to a new iphone and the problem followed. Went into app settings in iphone and selected the option to remove account, still same problem.

Had my company reset my okta verify on their end, and this app still will not open. Can NEVER get to launch app and scan barcode.

Garbage. At least they also use Google Authenticator which actually works.

Update: latest version finally fixed and resolved my issue.

This app works fine. I do have a suggestion on the placement of buttons on the Home Screen of the app when responding to a push notification. The buttons “Yes, it’s me” and “No, it’s not me” are hidden by “You have successfully responded to the push notification” when I have to receive multiple push notifications. This in only is a problem when receiving multiple notifications back to back. Maybe if the buttons moved up when the banner came in at the bottom or the banner came in at the top. Not sure if it’s a design specification to avoid accidentally touching the button when multiple requests come in.

Hey I still see the same issue. Is this being tracked as an enhancement?

I *wasreally excited to install this app on my watch.

My company uses Okta for dual verification and a quicker way to log in without have to constantly have my phone handy sounded awesome. So it’s pretty easy to imagine how disappointing it was to find that more than half the codes are too large to be fully displayed within the blue circle I’ve grown to loathe. Most of the time you only see the first 3 to 4 numbers.

I did find out that, every so often, a code containing certain digits that take up less space (like 1’s) will fully appear. Unfortunately those are not frequent enough so I’ve given up and gone back to google Authenticator. Please fix the app! I would rate it 5 in a heartbeat if the one massive flaw was corrected.

I use both Okta Verify and PingID everyday to authenticate to different work servers. It’s likely implemented this way because some servers work better with one or the other.

I heavily depend on my Watch to verify the authentication attempt.

The Okta message is too big for my iWatch 3 38mm screen. The “Yes, it’s me” button is just barely on the bottom of the screen. Sometimes I can get it but sometimes I have to scroll. This is because Okta is including the general area from where the auth request originated, which is based upon IP, which is useless if I’m going through a VPN that masks my real location.

PingID gets it right. The notification shows up on my watch, I rotate my wrist and touch the screen. Done. With Okta, I have to fiddle about.

Absolutely horrendous app with miserable end user experience. Once you initially create a login profile on a given device, the only way to make any modifications whatsoever to the account (including setting up your new phone to receive the codes/pushes) is to receive a code/push on the phone you initially set up the profile with (aka the phone you no longer have. Brilliant! Then online you have the option initially to authenticate with your password instead of receiving a code or push, but then when you enter the correct password that takes you to another screen where they have to make sure it’s you and your only options are once again to receive a push/code on the old device you no longer have. Garbage MFA system, hope my organization moves on soon.

It doesn’t allow you to copy and paste in a code from the account you are trying to set up. You have to manually key in each digit - and be sure to include all “spaces”. Maybe the app doesn’t support pasting in the setup code for security reasons? If so, I can give them a pass on that.

However, if you get a new device or you have to reset your existing device, the accounts do NOT sync to the iCloud, so it’s not a true IOS app. Poor design on their part.

So, why use this app when there are others that will sync to iCloud? I am obligated to use this poorly designed app because one of my accounts only supports this one

From the low ratings, I can see that they don’t look at or care about user feedback. In fact, they don’t even offer a tech support help option in the app.

Apple watch implementation is essentially non-functional on Apple Watch 4.
On the new Apple watch (44mm) only shows 4 digits (are you supposed to guess the last two digits?). Changing the font size only lasts for the first time you view the app, then it goes back to the latest digits. Does not receive alerts (yes I validated notifications were on).

Update: Was able to receive the push to the watch by turning off send push automatically. Still don't get the alert on the Apple watch. Must open app on watch, then the push is received. Keeping the rating because of poor design and implementation.

On iPhone app: Can't delete an existing profile within the app, must go to settings and clear account info, uninstalling/re-installing app, or you have to add a second profile to delete the first.

After the developer responded to my review, I candidly did what they asked in the app and turned on notifications for the app to get code push to work. Like many, I have most notifications off on most apps to remove unnecessary distractions, so once I installed this app, I initially turned off notifications immediately which led to my initial extremely degraded experience. Code push only works when you have notifications turned on.

Even with notifications fully on for the app, I have not received any notifications from the app which leaves me to think that if it is possible, the push should be able to work seamlessly without notifications turned on.

At the very least, a prominent warning should be instated for the user that notifications must be on in order for code push functionality to work properly and seamlessly.

We’re starting to roll the use of this app company wide and most of our users are up and running in just a few steps. The look and feel is much nicer and accessible than the previous Authenticator app we were using for our previous idP. The only problem we’ve had with some users is the “feature” that the push notification doesn’t arrive because their phone clock wasn’t automatically syncing with the network and for some reason its time was a little shifted from the server time. I wished Okta support had shared the information with us earlier (what about including it in the logs we got?) so we wouldn’t have lost a whole day troubleshooting the problem, but that’s NOT a problem with the app itself and now that we are aware of the information we’ve shared it with our local admins and so far we haven’t heard of any further issues.

My employer implemented the push+number flow this week. We used to use push only but wanted to increase security. The flow for this on Apple Watch is TERRIBLE -

1. Notification arrives
2. Scroll down
3. Tap “Review”
4. Info about signon shows up and tap “Yes it is me”
5. Wait about 2 seconds for info to show up on browser and in notificaton
6. Tap the correct numbeer
7. Since this flow is now in the app rather than a notification, you then have to press the crown to exit the app back to the watch

Before it was just notification arrives and there was less text on screen so you could tap approve without scrolling down. I hope this can be improved in the future. Step 2 should be removed. Step 3 and 4 should be combined. Step 5 should be dramatically improved (our old vendor Duo was much faster). I’m not sure if it is possible but it would also be nice if the app could auto close after completing the flow so that step 7 isn’t necessary.


Not quite sure where all the vitriol for this app comes from, I’ve been a daily user for about 2 years and rarely have operational or server-based issues with push notifications or codes not working.

I’m also an IT admin and it seems that most of the negative reviews fall into 2 categories:

1- “I don’t like that my work makes me do this.” Ok! Fair enough – but that’s an issue to take up with your employer, not Okta.

2- General issues with having to re-enroll with a QR code. That is how these apps (Okta Verify/Duo/Google Auth) are designed! You must contact your employer’s IT dept to reset for you. The app is not designed to be repeatedly deleted and re-added by the user. Just keep it installed on your device!

That being said, the app does have a glaring fault:

The “iPhone X update” to make this full screen is just a scaled up version of the existing interface. Come on Okta! Don’t be lazy, it looks sloppy. Really shows poorly on your UI/UX teams.

Oh good. More steps to get everything done, thanks for that. Security you say? Really? Because since my phone is the authentication device, and also the thing that is the primary device for logging into everything, and also the thing most readily stolen, I’m just not seeing it. So my phone is stolen, then as the thief logs into my stuff and is asked for two-factor authentication super security awesome sauce, they go “yup” and then click the “ok” button on the phone they stole and they’re in. They did, however, have to wait an extra minute and click several obligatory buttons. Secure!

Now let’s go back to me: the daily user. Hey look, I need to sign into things, but wait! You need two factor authorization! Please click all these buttons, wait for the push to send, then click “yeah dude, it’s super cool if I allow myself access to the carp (intentional misspelling) that I need to log into every frack-rabbiting day!”

Lovely.
Oh hey: did you get a new phone? Guess what?! Have fun logging in. You need to use two factor authorization to verify your two factor authorization.
But you probably remember the 16 character password you were forced to set up 2 years ago, right?

If I could give zero stars I would. There is no option to change how a person wants to get notifications. When you choose iPhone it is required for face recognition — what if a person does not want that and they wish to change to SMS (text message). There is NO WAY to change that option. FIX THIS!

Have this app for college, accidentally deleted it this morning and logged everything in and when I try to access school emails it says push was sent but I get nothing because I can’t put my phone number in my phone, and I already have an account so I can’t scan another barcode. This is really frustrating

Not sure if this was related to the iOS 13/watchOS 6 upgrades or replacing my phone but the watch app does not recognize my accounts anymore. Uninstalling and reinstalling the watch app didn’t do the trick. The ability to respond to the push notification directly on my watch was the standout feature for this app.

Please update the Apple Watch version of this app! We are BEGGING you! The iOS version of this app works as described, but the WatchOS version needs some serious updates to the user interface as the Two-Factor code that is generated is cut-off making it basically useless. Again, we are BEGGING you to please fix this!

Normally the app works great, but I’m unable to open it at all after this latest update! I’m supposed to be working right now but I can’t because it crashes instantly when I try to open it! I seen others have also had this issue and were able to get it resolved quickly.

I have an iPhone 6plus version 12.4.9. Please fix ASAP.

Horrible application that I’m being forced to use.. it’s clear that this was not developed to slow two different mobile devices to be used thus impacting folks who need that functionality..
Also they removed the simple way to add an account.. modify an account doesn’t work either.. duo is much better and so is Microsoft Authenticator

The old release would let you accept or decline straight from the notification screen. The new one forces you to open the watch app, which may or may not prompt you to authenticate. If it doesn’t, then you have to hunt for your phone, locate the app (since the notification is gone), and approve it there. This is a big step backwards!

Let me just start off saying that this app is pointless. There is no need for it when you already have a username and password on your work website. When it asks you to scan for a barcode there is none. I looked for it for about an hour before finally giving up. In conclusion, THIS APP IS GARBAGE. ITS A PIECE OF $@&$!
0 out of 100 stars

I get stuck at the Push screen. I have notifications turned on and reinstalled the app numerous times and nothing at all. It somehow still remembers the data and doesn’t notice I have notifications turned on for the app. I just keep getting stuck at the same area. Not fun at all. Spent all day at work trying to get it to work and it never did.

Okta...PLEASE fix the Apple Watch app. I have to wait for a full cycle to even display the first code and then I can only see 4 digits of a 6 digit code (seriously!). The phone app is great. (You’ve done a fine job there). But do yourselves a favor and get rid of the “ability” to use the app on the Apple Watch until it’s actually functional.

Thanks

As an SSO service provider, Okta is good.

At developing mobile apps, Okta is very bad.

I am trying to simplify add my MFA to my Apple Watch and it says ‘No accounts’. Has been this way for months now which is pretty ridiculous.

Okta I know you’re making a lot of money, please hire some decent application devs or take a hard look at your QA department.

This app is awful you will be very frustrated trying to navigate using a mobile device very out of date and customer service non existent. Very poorly designed, you are required to scan a QR code to sign in but none have been sent. Their help page recommends opening the code on a different device but again there are no codes and you can’t sign in to two devices at once

Why was there a need to change the notifications on the apple watch? OKTA is the only reason I bought a watch, so I don’t have to open the app every time. In the past I could simply say yes, it’s me from the notification on the watch, now I need to open the app to do so. I use okta 20+ times a day to authenticate to resources at my company. Having to open the app just add unnecessary hassle.

I recently got a new phone and re-downloaded this app so I can use it for work but it’s so freaking hard to sign in! Can’t even pass the barcode stage or the no barcode! And when I tried to follow the steps to reset the app so that I can register my new phone... NOTHING WAS HAPPENING!

So disappointed and was hopping to use this because I’ve heard good things. But I’m giving up. It’s to frustrating ‍♀️‍♀️

I would not bother to write a review if it didn’t bother me so much. Okta worked fine with my Apple Watch for a while that I can confirm the authentication on the watch without open the phone. But after I changed to iPhone 12 mini and reinstalled the okta, the notification on phone only had a”dismiss” button but nothing else. Even I installed Okta on my watch which I didn’t have to do earlier, it didn’t help. Please fix the bug!

This is the worst excuse for an MFA app ever. The push feature doesn't work. It requires a personal device to be set up for push. So for example if you issue your team a machine they cannot sign into without this because they need it for VPN, they have to enroll in Okta on a home PC or something to scan a QR code. Routinely it fails to send push notifications for our company. Okta should be paying us to beta test their trash software.

I have to go through this piece of crap app to login to work by phone. It routinely doesn’t work right. Tonight it was asking me if I was logging in from somewhere in Kentucky, nearly Six Hundred Miles from my actual location. I despise this app and the number of times I have to logout, closeout, and just try to get it to work right so it will do it’s sole stupid job and “verify” me to my jobs login. This app is completely pointless if it can’t do its sole purpose correctly and instead impedes me from being able to work.