New Duo Security Enhancements Coming

On Thursday, January 23rd, the University will be enabling several new features for Duo. If you want to take advantage of these new features, please check your mobile device app store (Apple App Store, Google Play Store, etc.) to see if you have the latest version of Duo Mobile. These enhancements include a new device verification, changes to make Duo callback more secure, a phone security checkup tool, and the ability to back up and restore your Duo settings on iOS and Android devices.

 

 

New Device Verification:

When upgrading to a new device, Duo will send an in-app notification from the user’s phone or tablet whenever they add or remove a Duo authentication device. The user must have already activated Duo Mobile for use with Duo Push to receive the notification.

 

 

 

 

 

 

 

 

 

 

Duo Callback Changes:

When using Duo callback, the default setting has always allowed users to press any key to approve an authentication request. This is changing. Users will now be required to press a specific key to authenticate and now have the option to report fraud by selecting a different one. This will add an additional security layer to the phone call option.

Duo Call-back keys

Duo Mobile Security Checkup Tool:

The Duo Mobile app’s Security Checkup feature checks and reports on a user’s iOS or Android device security hygiene in the application itself. Potential device security issues, like an outdated operating system or lack of screen lock, are flagged within Duo Mobile for action by the user. Security Checkup doesn’t block users from authenticating if it does find any issues with a user’s phone.

 

 

Duo Instant restore

Duo Mobile App Instant Restore:

Instant Restore allows Duo to use the built-in backup systems used by iOS and Android Devices (iCloud Backup and Google Drive) to store the secure application information required to use Duo on your device. iOS users need to ensure that iCloud Keychain is enabled on their iOS devices, and Android users should toggle on the Backup accounts with the Google Drive option in Duo Mobile.

When users with account backups open Duo Mobile on their new device, they can tap Get My Account Back to begin the Instant Restore process. Android users must have their old device available to scan a QR code generated on that device to transfer the information to the new device.

This means there will be no more calls to the helpdesk or support when you get a new phone; you can immediately be up and running using Duo on that new device.