Cybercriminals have intensified attacks on Duo authentication methods that rely on SMS and phone calls. These less secure options are vulnerable to SIM swapping, interception, and spoofing. Additionally, phishing kits readily available online allow attackers to harvest usernames, passwords, and SMS authentication codes in real time.

What is changing?
To protect your W&L account, ITS will remove the text message (SMS) and phone call options from Duo authentication for employees starting August 12, 2025.

What do you need to do?
To ensure uninterrupted access to your W&L account, please set up Duo Mobile as your primary second-factor authentication method by August 12, 2025.

To get started, please refer to the setup instructions  on the ITS website or contact the ITS Helpdesk for assistance (540-458-4357 or help@wlu.edu).

Note: If you already use the Duo Mobile app, a hardware security key, or Touch ID, no action is needed.