Introducing Verified Duo Push

In response to the rising number of phishing attacks targeting universities, we are implementing Verified Duo Push as an additional security measure for our authentication process. This change is crucial in strengthening our defenses and protecting our campus community from unauthorized access.

Verified Duo Push requires users to enter a three-digit code to verify authentication requests, rather than simply approving or denying notifications. This added step significantly enhances security by reducing the risk of push fatigue, where users may unknowingly approve fraudulent requests.

Why is this Important?

Phishing attacks are becoming increasingly sophisticated, often targeting unsuspecting users to gain access to sensitive information. By requiring a code, we encourage more mindful interactions with authentication requests, making it harder for attackers to exploit our systems.

Here’s how it works

1. Log-in as normal, with campus credentials.

2. You will be prompted on device you are attempting to log-in on with three numbers.

3. Then you will go to your DUO mobile app to enter the three numbers displayed on your device.

4. Enter the correct three numbers and you will succesfully be logged in; however, if you enter incorrect numbers you will recieve the following prompt on your computer to "Try again".

5. Lastly, if you recieve a prompt on your Duo app and you were not attempting to login, please click the "I'm not logging in" option and report it as a suspicous login to prevent further attempts.