UPDATE: Switch to the Duo Mobile app: Texts & callbacks to be discontinued 2/23
February 19, 2025 Summary
Due to growing cybersecurity threats and to meet new login requirements from the University of California Office of the President (UCOP), UC Davis will no longer support less secure login methods for Duo. Starting Sunday, February 23, 2025:
- Text and callback options will no longer be offered to members of the UC Davis and UC Davis Health communities.
- Hash-based, one-time passcodes (HOTP) from Duo will be disabled for UC Davis students, faculty, and staff.
- D-100 hard tokens will no longer be supported.
Take Action Before February 23, 2025
Aggies must take the following actions by February 23, 2025 to retain access to university accounts and services.
- If you are using an updated Duo Mobile app and a Duo Push to verify your identity when logging in to UC Davis services, then you do not need to take any action.
- If you have the updated app but still use text messages or phone calls to complete your login, then switch to Duo Push notifications.
- If you are using an outdated version of the Duo Mobile app (version 4.49.0 or earlier), then update your app.
- If you are not using the Duo Mobile app, then enroll a smartphone or enroll a tablet.
- If you do not have a Duo Mobile app compatible device, then you may use a security key (a piece of hardware that generates unique codes for identity verification) available for purchase.
- If you are using the D-100 hard token, switch to the Duo Mobile app or a security key.
Additional Resources
- Switch to Duo Push notification (if you already have the Duo Mobile app)
February 7, 2025 Update: To better support members of our community, the deadline to switch to the Duo Mobile app has been extended to Sunday, February 23, 2025. Text messages and phone callbacks will no longer be offered as login approval options for Duo effective Sunday, February 23, 2025.
Beginning February 23, 2025, text messages and phone callbacks will no longer be offered as login approval options for Duo, the multi-factor authentication tool in use at UC Davis and UC Davis Health. This change will improve campus cybersecurity, protecting Aggies from emerging cybersecurity threats targeting higher education institutions, and meet new UCPath login requirements from the University of California Office of the President (UCOP).
How to Prepare & Ensure Uninterrupted Access to Campus Services
UC Davis and UC Davis Health students, faculty, staff, and affiliates will use the Duo Mobile app to verify their identity and access campus services and UCPath starting February 23, 2025. The app offers more secure and convenient options, such as the Duo Push, which allows you to approve login requests with a simple tap.
- If you are already using the Duo Mobile app, your login experience will stay the same and you do not need to take any action.
- If you are currently using text messages or phone callbacks to confirm your identity and do not switch to the Duo app by 2/23, you will not be able to access campus services, such as your email, UCPath, or Canvas.
- If you do not have a smartphone or device on which to download the Duo Mobile app, you may use a security key (a piece of hardware that generates unique codes for identity verification), available for purchase.
Get Help
We recognize that this change may be challenging for some members of our community. For support, contact:
Your department IT for support, if applicable.
IT Express for UC Davis Campus at ithelp@ucdavis.edu or 530-754-HELP (4357), Monday through Friday, 7 AM – 6 PM.
Technology Operations Center for UC Davis Health at 916-734-HELP (4357), 24 hours 7 days a week.
4 Benefits of Duo Mobile App
- Secure: The Duo Mobile app provides more secure authentication options, like Duo Push. Text message and call-back methods can be vulnerable to interception or SIM-swapping attacks.
- Convenient: The Duo Mobile app allows for quick and easy approval of login requests. With Duo Push, authenticating is as easy as a single tap.
- Reliable: The Duo Mobile app does not rely on cellular networks and can generate passcodes even when your device is offline.
- Cost-effective: Using the app avoids potential charges associated with receiving text messages or phone calls, especially when traveling abroad.
Get Started with Duo Mobile
Download the app through your device’s app store. It is free to download, but users should be sure to upgrade to their device’s latest operating system first because Duo no longer supports some older iOS and Android operating systems. Follow the links below for instructions on how to add Duo Mobile to your smartphone and tablet and to learn more about the app.
- Enroll a smartphone in Duo
- Enroll a tablet in Duo
- Switch to Duo Push notification (if you already have the Duo Mobile app)
- Enroll a new smartphone in Duo
- Duo authentication with no Wi-Fi or cellular connection
We appreciate your partnership as we work together to keep UC Davis and your personal information secure.