¾«¶«AV

Even with multi-factor authentication enabled at ¾«¶«AV, accounts can still be compromised. This extra verification step is a tool to help thwart hackers and keep college data safe.

Consider this real-world example... A phisher sets up a fake webpage with an identical-looking ¾«¶«AV login page. You enter your ¾«¶«AV username and password on the fake login page, effectively handing over your login credentials to the phisher. Now, the phisher uses those same credentials to immediately log into a real ¾«¶«AV website (such as IRIS), which then sends a Duo push to your phone. You accept the request, thinking you received it because you were just trying to log into (what turned out to be a fake) ¾«¶«AV website. Now the phisher has full access to your ¾«¶«AV account--can read/send emails, access your Google Drive files, see your W-2 through Employee Self-Service, etc.

With Duo Verified Push, users will be presented with a 3-digit code:

At this point, enter the three digit code in the Duo Mobile app on your device. That's it!

The change to Duo Verified Push has no impact on other Duo methods. Hardware tokens, passcodes from the Mobile App, SMS, and phone call options will still work. Using Duo Push with the mobile app is still our recommended method at ¾«¶«AV.

Yes! You still have the option to remember Duo on trusted devices. When selecting this option, you won't be prompted with Duo for another 30 days (this is a per browser, per device setting).