Summer 2024: Disabling Duo SMS text messaging authentication method
[Video] How do I switch from Duo SMS to Duo Mobile App?
[Step-by-Step Instructions]
When?
In the summer of 2024, VCU will depreciate using Duo SMS as a multi-factor authentication method. The preferred method is to use the Duo Mobile app.
History
On June 30th, 2022, VCU disabled Duo's SMS text messaging option as an authentication method. An exception to continue to use SMS was granted to people who have been using the SMS option for the previous 90 days to the change date (Jun 30th, 2022).
How Will This Affect You?
Reason
How will I use Duo if you're removing SMS text messaging?
The preferred method is to use the Duo Mobile app. There are several other options for using VCU 2-factor authentication:
- Duo Mobile app (Free; Requires a smartphone)
-
- Duo Push
-
The Duo Push method sends a notification to the Duo Mobile app on your smartphone.
-
-
- Duo Soft Token / Passcode (Requires Smartphone but does not require Internet/Cellular service)
-
The Duo Mobile app also contains a passcode generator, allowing you to generate a one-time code for the "Enter a Passcode" field. This passcode generator does not require any Internet or cellular connection and is ideal for use in areas with a limited network connection.
If you cannot install the Duo App on your phone, don't hesitate to contact the VCU IT Support Center for an alternative method for 2-factor authentication.
Supported versions of the Duo Mobile app as of January 2024
-
Android
The current version of Duo Mobile supports Android 10.0 and greater and Android Go 10.0 and greater. Duo recommends upgrading to your device's most recent version of Android. We cannot ensure the compatibility of Duo Mobile with custom variants or distributions of Android. Duo Mobile is not supported for use on ChromeOS or Huawei. The Duo does not provide official support for non-standard custom Android distributions like OnePlus, LineageOS, or ColorOS.
-
iOS
- The current version of Duo Mobile supports iOS 14.0 and greater but cannot guarantee Duo Mobile's functionality on preview/beta software provided by Apple. Duo recommends upgrading to the most recent version of iOS available for your device. The Duo Mobile app is compatible with newer iPad models.
- February 8, 2024, will be the last date of support for Duo Mobile on iOS 14. Effective February 8, 2024, iOS 15 will be the minimum supported version for Duo Mobile.
- iOS 13 and older - Users running versions 13 and older cannot download the latest version of Duo Mobile from the App Store. This removal from the App Store does not affect mobile app authentications for users who have already downloaded the app. Additionally, Duo no longer provides troubleshooting support, bug fixes, maintenance fixes, or security updates for mobile devices running version 13 and older.
Alternate methods to authenticate to Duo if my phone does not support Duo Mobile App:
2FA Method* |
Developer |
Model |
I/O |
Internet Required? |
Works with RamsVPN?(Cisco AnyConnect) |
Works with VCU Websites?(CAS, entraID, etc) |
Cost |
Where to get it? |
|
Duo Mobile App**
|
DUO
|
-
|
Push | Yes |
Yes
|
Yes
|
FREE
|
|
| Passcode | No | |||||||
|
Security Key
|
Titan Security Key | NFC USB-C USB-A |
No
|
No
|
Yes
|
$30 – $35 | Google Store | |
|
Yubico
|
Security Key Series | NFC USB-C USB-A |
$25 – $29 | |||||
| YubiKey 5 Series | NFC USB-C USB-A Lightning |
Yes | $50 – $75 | |||||
| Hardware Token | DUO | DUO-TOKEN | Passcode | No | Yes | Yes | FREE*** | VCU IT Support Center VCU fixIT |
*All methods require a first-time setup with an internet connection at https://eid.vcu.edu. For assistance, call 804-828-2227.
**Requires a compatible mobile device, such as a smartphone or tablet. For compatibility information, visit the App Store link in the chart above for your device's operating system.
***First time only. A replacement fee of $20 will be charged for lost, stolen, or physically damaged tokens. Tokens with dead batteries will be replaced at no cost if you bring the token back to us with a dead battery.
Which Security Key to use
Token Type |
Pros |
Cons |
|---|---|---|
| Security Key Series - Yubico |
|
|
| Yubikey 5 Series - Yubico |
|
|
| Titan Security Key - Google |
|
|
| Duo Hardware Token |
|
|
SMS to Duo Mobile App: Step-by-Step
- Install the Duo Mobile App on your smartphone or tablet if you haven't already done so. You can find it on the App Store (iOS) or Google Play Store (Android).
- Update Your Authentication Method:
- Log in to your VCU account - https://eid.vcu.edu using your current 2FA method (SMS).
- Navigate to the 'Manage Security' tab.
- Look for the phone number registered with SMS under 'Duo Authentication Devices'.
- You will notice that the 'Push Enabled' field status reads as 'Not Linked', since your registered phone only is enabled for SMS.
- Click the QR code icon to register this device with the Duo Mobile App. Please ensure you have downloaded the Duo Mobile App before continuing.
- Click 'Confirm, and you will be presented with the QR code
- Open the Duo Mobile App on your smartphone, click the 'Add' button, and click 'User QR code.' This will allow you to scan the QR code.
- Save the account information by clicking 'Done.'
- In the 'Account Management Portal,' the 'Push Enabled' field now reads 'Enabled' status.
- This will now allow you to use the Duo Mobile App on this device. Test your Duo Mobile Push Authentication by logging into a VCU CAS login page, such as https://my.vcu.edu
- For a video tutorial on using the Duo Mobile App with Duo Verify Push, please click on the following link - How to use Duo Universal Prompt?