| Category | Function | Share | Rank | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|---|
| Multi-factor authentication | Identity and access | 4% | 5 of 78 | 32% | 22 | criticized challenger |
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 1 | 1 | 0 | 0 | 2 |
| GPT-5.4 mini | 0 | 0 | 1 | 0 | 1 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 1 | 1 |
| Perplexity Sonar | 0 | 1 | 0 | 0 | 1 |
| Grok 4.1 Fast | 0 | 0 | 0 | 2 | 2 |
| Mistral Small | 0 | 0 | 1 | 1 | 2 |
| DeepSeek V4 Flash | 0 | 1 | 0 | 1 | 2 |
| Llama 4 Maverick | 1 | 0 | 0 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 1 | 1 | 1 | 3 |
| Kimi K2 | 0 | 1 | 1 | 1 | 3 |
| GLM 4.7 FlashX | 0 | 2 | 0 | 0 | 2 |
| MiniMax M2.5 | 0 | 1 | 1 | 0 | 2 |
Verbatim evidence the judge attached to positive labels.
“Start with authenticator apps, which offer good security at no cost” Claude Haiku 4.5 · MFA · budget prompt · first choice
“is Duo Free or Google Authenticator for under 10 users” Llama 4 Maverick · MFA · budget prompt · first choice
“Prefer authenticators that keep data local-only (like Google Authenticator or Microsoft Authenticator...” Qwen 3.7 Flash · MFA · negative prompt · alternative
“Authenticator apps with TOTP (Google Authenticator, Authy, Microsoft Authenticator) - Better than SMS” Kimi K2 · MFA · negative prompt · alternative
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
“Applications like Google Authenticator or Microsoft Authenticator generate 6-digit codes ... they are vulnerable to Adversary-in-the-Middle (AiTM) phishing.” Gemini 3.5 Flash · MFA · negative prompt · soft negative
“it lacks advanced admin controls and backup features, which may be a limitation for some businesses” Mistral Small · MFA · budget prompt · soft negative
“Be Cautious With: TOTP Apps (e.g., Google Authenticator, Authy) ... but phishable” Grok 4.1 Fast · MFA · negative prompt · soft negative
“TOTP-based (NOT phishing-resistant). Codes can be phished via real-time proxy attacks.” Kimi K2 · MFA · comparative prompt · soft negative
Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 35 of the 50 answers that named Google Authenticator and are not a share of its labels.
133 of the 133 domain citations in answers naming Google Authenticator came from somebody else's page.
Pages are listed as the models cited them.
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Google Authenticator's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Google Authenticator, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at google.dev is approved on the spot, any other address is reviewed by hand.
Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.