Is Okta FastPass Considered a Phishing Resistant Authenticator for Unmanaged BYOD Devices
Nov 12, 2025
Multi-Factor Authentication
Okta Identity Engine
Overview
This article clarifies whether Okta FastPass is considered a phishing-resistant authenticator when using unmanaged BYOD devices.
Applies To
- Okta FastPass
- Okta Identity Engine (OIE)
- BYOD devices
- Unmanaged devices
- Safari browser
Solution
Okta FastPass is considered a phishing-resistant authenticator on unmanaged BYOD devices, only if the "Phishing resistant” constraint in the App Signon Policy rule was chosen. If that checkbox was not selected, Okta FastPass may choose a non-phishing-resistant method to authenticate the user.
