Duo Verified Push

ITS is enhancing the security of Duo push notifications by implementing Duo Verified Push on December 19, 2024. After this change, you will enter the three-digit code on your login screen into the notification from your Duo Mobile app.

Enter the code on the login screen into the Duo push notification

Enter the code on the login screen into the Duo push notification

Why did ITS make this change?

With the traditional Duo push notifications, you click either “Approve” or “Deny.” Bad actors, however, can exploit this basic method and trick users into accepting a push for a fraudulent login attempt. They might, for example, take advantage of “push fatigue” and hope that a user will approve a push out of habit. Another technique is to annoy users with repeated push notifications until they finally accept one.

Duo Verified Push provides better protection against these scams. By entering a code that only you can see, you ensure that only you can successfully authenticate.