Staff get additional protection against unsolicited Duo pushes
In the near future, UWIT will add an extra level of security for Two-Step Login for all full-time UW staff. Duo Verified Push will be enabled.
What staff will see
When staff log in to an application that uses Duo Verified Push, they will see a six-digit number. They then enter those numbers into their Duo Mobile app on their authentication device (usually a smart phone) to approve the push. By using the “Remember Me” checkbox, they will not be asked for another verified push for 30 days on that device.
Benefits
Duo Verified Push provides additional protection against attackers sending unsolicited Duo pushes trying to gain access to UW staff accounts. Because of the added level of security, Duo Verified Push lets staff stay logged in to their devices for a longer period (up to 30 days).
Older devices
For old or outdated devices, the UWIT encourages staff to upgrade their phone. To log in with Duo Verified Push, staff will need:
- Duo mobile version 4.16.0 or later on Android 8 or later
- Duo mobile version 4.17.0 or later on iOS 13 or later
If staff have an existing exception to messages or phone calls to log in with Duo, they can disregard emails about Duo Verified Push as no change is required for their devices for now.