...
What if I receive a Duo Authentication but wasn’t accessing something that requires MFA?
This may mean your password has been compromised and someone is trying to access an MFA protected resource using your identity. Do not approve the Duo Authentication request. Change your Net ID password immediately and contact the ITS help desk and ITS security team.
| Anchor | ||||
|---|---|---|---|---|
|
Sometimes an attacker may try to annoy or overwhelm a user by triggering multiple Duo Push notifications with the goal of getting them to just approve the Duo Push request. Other times a user may accidentally or blindly approve a Duo Push notification if they regularly use resources that require MFA. Verified Duo Push attempts to address those scenarios and is a more secure authentication method than Duo Push. When a user accesses a resource that requires MFA they’ll see a code pop-up on the screen where they are trying to access the resource. The user must then type that code into the Verified Duo Push notification on their phone.