WatchGuard AuthPoint vs Yubico Authenticator

WatchGuard AuthPoint is a cloud-based multi-factor authentication service that checks users before they access computers, VPNs, cloud services, and applications. Verification options include push notifications, one-time passcodes, QR codes, hardware tokens, and phishing-resistant FIDO2 passkeys. Access policies can consider device, location, behavior, time, and device DNA. An application portal provides access to SAML and OIDC apps, and WatchGuard lists more than 130 third-party integrations, including VPN, Microsoft Entra ID, and cloud applications. The service is managed through WatchGuard Cloud, which supports multi-tenant administration for service providers. An optional Gateway connects AuthPoint with RADIUS clients, Active Directory or LDAP, and the ADFS agent; it cannot be installed on Windows servers with FIPS mode enabled. AuthPoint is licensed per user, with pricing available from a WatchGuard reseller and no free plan. A 30-day trial for up to 250 users is listed. The mobile app supports Android 7.0 and higher and iOS 14.0 and higher.

Yubico Authenticator generates two-step verification codes for online accounts on mobile and desktop devices. It supports TOTP and HOTP, and users can add credentials by scanning a service’s QR code. Credentials are stored in a YubiKey secure element; Yubico says they cannot be extracted. Since the credentials remain on the portable YubiKey, the same codes are available through the mobile and desktop apps. The mobile app supports tap-and-go authentication on NFC-enabled devices, and credentials can be added with a YubiKey touch or NFC tap. Yubico says users can unlock a YubiKey with Face ID or Touch ID. The app can display OATH codes and manage a YubiKey’s FIDO PIN or perform a factory reset. It is free and open-source software, listed at free, for Windows, macOS, Linux, iOS/iPadOS, and Android. Generating and displaying OATH credentials with the desktop app requires a YubiKey.