The only maybe grey area is to only us it as authenticator. But yes even then the company needs to provide this, a cheap phone works.