Duo MFA Update: Retiring Text and Phone Call Back
Oct 19, 2026
By November 9, 2026, you must use Duo Push to access university systems with Multi-Factor Authentication (MFA). Text messages and phone calls are a security risk as they can be intercepted, redirected, or manipulated through phishing. Duo Push provides stronger verification and will replace those options.
Multi-Factor Authentication (MFA) with Duo is used to verify your identity when accessing university systems such as Canvas, Microsoft tools (Outlook, OneDrive, Word, etc.) and CU Access.
If you already use Duo Push, no action is required.
If you do not currently use Duo Push, complete these steps before November 9:
- Confirm that your device has a compatible operating system: Duo iOS and Duo Android.
- Update your operating system, if necessary.
- Install or update the Duo app.
- Register your device (first time only) or reactivate the Duo app (new devices or reactivating on the same device after deletion.)
- Select Duo Push when you sign in.
Need help? If you face a technology, device, or accessibility barrier, contact the Service Desk. We will work with you to find a path forward. You can also visit the Accounts and Access knowledge base for self-service resources.