Disabling Duo SMS text messaging authentication method
What is happening?
On June 30th, 2022, VCU is disabling the SMS text messaging option in Duo as a method of authentication
An exception
People who have been using the SMS option for the previous 90 days to the change date (Jun 30th, 2022) will be able to continue to use SMS for the foreseeable future.
Reason
The SMS text messaging login method for Duo has become less secure. Therefore, to protect institutional accounts, we will be disabling Duo SMS text messaging as an authentication method option.
How will I use Duo if you're removing SMS text messaging? Or don't have a Smartphone.
- Duo Push
The Duo Push method sends a notification on your smartphone to the Duo Mobile app. - Duo Soft Token / Passcode (Does not require Internet/Cellular service)
The Duo Mobile app also contains a passcode generator that will allow you to generate a one-time code for the "Enter a Passcode" field. This passcode generator does not require any Internet or cellular connection and is ideal for use in areas with a limited network connection. - Hardware Token (If a user doesn't have a smartphone)
A Duo hardware token is a small fob that generates passcodes for Duo access. Tokens work similarly to the Duo Mobile passcode option above, but without needing a smart
How can I request a hardware token?
VCU ITSC will have hardware tokens in stock to distribute to faculty/staff/students who don't have smartphones.