Use an app at $work for this
The authenticator app is fine, I guess. But if you go and look at its reviews on the App Store, there are hundreds of people on there complaining that they enabled it for their Idiotgram account, but then broke or lost the phone, and found themselves locked out. FOREVER. You have to set up some sort of backup / recovery thing or your account is unrecoverable.