There are three upcoming changes to Duo, which is used for multi-factor activation (MFA) when logging into email and other systems.
1. Duo’s new look and 3-digit verification codes (coming January 11th)
- The Duo prompt you see when logging in will look different. It will show a three-digit code to type into the Duo Mobile app as part of Push. The new prompt is very intuitive.
- The new 3-digit code (called Verified Push) protects against attackers tricking us into approving their access.
2. Duo has announced end of support for older versions of iOS and Android (as of February 9th)
- You’ll need to run at least iOS 14 or Android 10 to get future updates to the Duo Mobile app, which means that at some point phones running older OS’s will no longer work with Duo as they continue to make updates to the app.
- Most phones sold in the past five years can be updated, and older unsupported phones are likely insecure and should be retired.
3. Phasing out phone-call authentication
- Over the next two months, the phone-call authentication option will be phased out and will no longer be an option for most individuals. Please contact the Service Desk if you do not have a smart phone. We will work with you to ensure you have an alternative solution.
- Going forward, our main options will be the Duo Mobile app (Push or one-time passcode) and Duo hardware tokens (one-time passcode key fobs).
- Phone-call authentication allows attackers to trick us into approving their access.
- The Phone-call authentication option will be disabled in the following phases:
- January 5th – For those who have not used it and have used other methods in the past 30 days.
- January 31st – For those who have used it and some other method in the past 30 days.
- February 14th – For those who have not authenticated with Duo at all in the past 30 days.
- February 21st – For everyone else, including those who have only used phone-call authentication in the past. Everyone will need to use the Duo Mobile app or a Duo key fob by this date.
If you have any questions or concerns, or if you need assistance using the Duo Mobile app or acquiring a key fob, please contact the IT Service Desk at https://ithaca.edu/itchat or servicedesk@ithaca.edu. Thank you for your help securing our student, faculty, and staff accounts and information.
Information Technology Service Desk
607-274-1000
104 Job Hall