The University of Iowa is phasing out phone and text-message options for authenticating logins to university IT systems using Two-Step Login/Duo. The change will make systems more secure, help protect individuals’ academic and personal data, and reduce costs associated with phone/text authentication.
The transition begins Aug. 12 for users who’ve already enrolled in Duo Verified Push, the preferred method for authenticating system logins. As of Aug. 12, these users will no longer see phone and text listed among other authentication options if they haven't used SMS or voice authentication within the past 180 days.
On Sept. 9, phone and text authentication options will be disabled for users who have enabled Duo Verified Push but have used SMS or voice authentication within the past 180 days. These users will receive direct communication regarding the upcoming change and will be required to complete their transition to the Duo Mobile app.
Phone/text options for other users are slated for removal as of Nov. 4. All students, staff, faculty, and others who use HawkIDs to access university systems should ensure they’ve installed and configured the Duo Mobile app on a smartphone or tablet.
Users unable to authenticate using mobile devices or the Duo Mobile app can request a token device or generate a list of backup codes from campus computers.
Security and cost considerations prompted the change. Voice calls and SMS text messages are subject to cybercrime tactics like SIM-card swaps, eavesdropping or interception, malware, and social engineering.
Earlier this year, the university implemented Duo Verified Push for stronger security. Duo Mobile users now authenticate by entering three-digit codes generated by the app. Cryptographic security and phishing resistance make verified push safer. Unlike phone/text, it requires only an internet connection and isn’t dependent on cellular networks.
Duo Mobile remains the fastest, most secure, and most reliable option for authenticating logins. It’s also become the most popular verification method among Iowa students, staff, faculty, and others, with more than 65,000 users (compared to about 9,700 using phone/text).