Microsoft Authenticator on the Active 2: don't you just love to avoid using your phone for this?