Eleven of fourteen models named Cisco Duo first on the direct prompt; zero named Microsoft Authenticator. Cisco Duo was named by fourteen of the fourteen models and Microsoft Authenticator by eleven and Cisco Duo carries 66 labels and Microsoft Authenticator 18, so the shares are not directly comparable.
Named in six categories this edition.
Named in two categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the multi-factor authentication page.
Across every category in the November 2026 Edition, Cisco Duo and Microsoft Authenticator were named in the same answer thirty-six times, of the 237 answers naming Cisco Duo and the 46 naming Microsoft Authenticator. In those answers Microsoft Authenticator took the first choice eight times and Cisco Duo nine.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of five in this category shown.
“Legacy or basic versions of popular solutions (e.g., older Duo...): These can still fall to AiTM phishing, session token theft, or prompt bombing.” Grok 4.20 · negative prompt · soft negative
“Need fast rollout, minimal training, hybrid on-prem/cloud | Cisco Duo (broad protocol support, device trust, low admin overhead)” Qwen 3.7 Flash · comparative prompt · first choice
“Cisco Duo and Microsoft Entra ID (formerly Azure AD) are both highly recommended multi-factor authentication (MFA) tools” Mistral Small · paraphrase prompt · first choice
“The best MFA solution for a company with a limited budget is Duo Free or Google Authenticator for under 10 users.” Llama 4 Maverick · budget prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Cybercriminals exploit push-based MFA apps (like Microsoft Authenticator) by bombarding users with authentication requests until they accidentally approve one” Claude Haiku 4.5 · negative prompt · soft negative
“Push-based MFA (e.g., Microsoft Authenticator without number matching, Duo Push, Okta Verify) is vulnerable to: MFA Fatigue / Push Bombing attacks” DeepSeek V4 Flash · negative prompt · soft negative
“Examples: Google Authenticator, Authy, 1Password, Microsoft Authenticator ... Key Risk: Phishing via Adversary-in-the-Middle (AitM)” Gemini 3.5 Flash · negative prompt · soft negative
“Absolute lowest cost, 1-10 users, no central management needed: Roll out Microsoft Authenticator / Google Authenticator TOTP” Muse Glimmer 30B · budget prompt · first choice
“The most cost-effective option is authenticator apps like: Google Authenticator, Microsoft Authenticator, Authy” Claude Haiku 4.5 · budget prompt · first choice
“If you're already using Microsoft 365, start with Microsoft Authenticator for free.” Mistral Small · budget prompt · first choice
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.