Important Security Reminder about Multi-factor Authentication (MFA) with Duo Approvals
MFA with Duo Best Practices
Aug 27, 2024![AdobeStock_738563763 Laptop on a desk with two locks in front](https://cuanschutz.edu/images/officeofsecurityandcompliancecualibraries/default-album/adobestock_738563763-(1)-copy.jpeg?sfvrsn=df34cabb_3)
Our teams are committed to information security and best practices to protect your information and university data. Protecting your personal data helps prevent the loss of sensitive information and ensures your identity remains safe. Combined with vigilance regarding email phishing and text smishing attempts, it is important to also be aware of other cyber vulnerabilities such as multi-factor phishing requests.
One way to protect against cyber vulnerabilities is to utilize and install multi-factor authentication (MFA).Duo is the university used multi-factor authentication IT security app that requires you to confirm you are the one logging in to a secure access point. The Duo app on smart phones provides additional information about the location the login request is coming from which is very helpful in being certain that it is YOU authenticating. More information about installing Duo on your mobile device is available on the OIT website.
It is best practice when using Duo for accessing university resources to read through the pop-up message and verify your details before approving the login attempt. Don’t approve, unless it’s you.
Remember, you can help mitigate cyber vulnerabilities by keeping the following in mind:
- If you are not attempting to login to a university system and did not request a push notification, do NOT approve the request.
- Similarly, if you read the details and the location is not your current location or it doesn’t match up with your information, do NOT approve the request.
- When in doubt, reject the request.
If you think your credentials may be compromised or you receive a suspicious Duo notification, decline the request and report the incident to the OIT Service Desk.
If you have any questions about IT security, please contact our Information Security and IT Compliance team.
Together, we can keep university data secure.