Setting up Duo without a smart phone
Estimated Reading Time: 2 MinutesUsing the Duo Mobile Application for Enhanced Security
By transitioning users from SMS to the Duo Mobile application for authentication, we can significantly enhance the security of user accounts. This helps prevent unauthorized access or modifications by attackers to users' information (e.g. modification to direct deposit). The Duo application is the fastest and most convenient method of authentication and should be used.
Reasons SMS is being Discontinued for Authentication
- SMS Can Be Spoofed: Attackers can intercept or spoof SMS messages, compromising the security of the authentication process.
- Lack of Notifications: Without the Duo Mobile app, users do not receive immediate notifications of account changes, leaving them vulnerable to unauthorized modifications.
- No Step-Up Authentication: SMS does not support “step-up” authentication, which is crucial for verifying risky logins.
What to do if you have a Smart Phone but do not use the Duo App?
Visit https://2fa.app.clemson.edu/ and register the phone.
What to do if you do not have a Smart Phone?
For authenticating to most systems on campus without a smart phone, users can set up Windows Hello, Touch ID for MAC, or a software passkey. Most password managers now support passkeys, and it is a great option. These methods should be used for your authentication to all Clemson websites as these are more secure, convenient and can be used to clear risky logins without reaching out to the service desk.
For an article on Setting up Windows Hello to access Duo Security for Clemson web pages, click here.
For more detailed information on using one of these methods, visit the following duo guide https://guide.duo.com/universal-prompt#platform-authenticators.
How do I access the VPN and Citrix?
If you use the Clemson VPN, Citrix remote desktop or other non-web-based logins, then you will need to use a hardware token provided by CCIT. These tokens will generate a code you can use to log into these systems without a phone.
Duo Hardware tokens can be purchased from the CCIT Support Center Marketplace at https://secure.touchnet.net/C20569_ustores/web/product_detail.jsp?PRODUCTID=2820
Are students affected by the SMS deactivation?
Students will not be affected now. A future date will be set to disable this functionality.