Changes to Duo  - Spring 2026

Why are we making these changes?

• The level of sophistication of phishing attempts and cybersecurity attacks is increasing. Attempts are more targeted and personalized than in the past.

• Two-factor authentication methods like phone calls and text messages are more susceptible to issues - it's easier to inadvertently approve fraudulent attempts when it takes just a tap to approve.

See Cybersecurity for more information about keeping your accounts safe.

What do I have to do?

• If you currently use phone calls or text messages to approve login requests, we recommend downloading the Duo Mobile app and adding it to your devices. You’ll no longer receive phone calls or text messages after May 27.

  • • If you download the app after May 27 and have no other approval methods set up in Duo to verify your identity, you will need to contact ITS for assistance.

    • If your device has iOS 16 or greater or Android 11 or greater, you can download and use the Duo Mobile app.

    • If you are unable to download the app on your device, we recommend using a physical security key. Submit a ticket on the Request Help page, or email ithelp@smith.edu to request a key.

    • Review other available Duo device options.

• If you currently use the Duo Mobile app and enter a 3-digit code to approve logins, you don't have to do anything! 

• If you already use a security key, you’re all set! Your key will continue to work during and after the Duo changes.

• If you need assistance, please see Request Help to submit a ticket to IT Support. We are happy to help!

Manage Your Devices

If you need to make a change and aren't sure what your options are, see the Duo Devices page for information on available methods and how to add devices to your Duo account. 

Enhanced Security in the Duo Mobile App

As of April 14, instead of selecting Approve when you receive a push notification, you'll be prompted to enter a unique code to verify your identity.

Here's how it works: