Personally, I would avoid Google Authenticator and Microsoft Authenticator; they both work fine, but it's just too delicate of information to put within reach of their tentacles. I like Authy, Yubikey, and Aegis.