Duo 2-Factor Authentication (2FA) Update: What You Need to Know
SMS Passcodes to Be Disabled by April 2026
UIC Technology Solutions will be disabling SMS (text message) passcodes for Duo multi-factor authentication by the end of April 2026 as part of an ongoing effort to strengthen account security across campus.
Faculty, staff, and students who already authenticate using Duo Push will not be impacted. Individuals who currently rely on SMS passcodes will need to switch to Duo Push or another supported authentication method before the deadline to avoid disruptions.
What you need to know
What is Changing
SMS passcodes will no longer be available as an authentication option in Duo after April 2026. This change aligns UIC with modern cybersecurity best practices and reduces reliance on authentication methods that are more vulnerable to interception and fraud.
Why This Change Is Being Made
SMS-based authentication is considered less secure than app-based or hardware-based methods. Disabling SMS passcodes helps better protect university accounts, personal data, and institutional systems from phishing and unauthorized access.
Who Is Affected
- If you currently use SMS passcodes to authenticate, you’ll need to switch to Duo Push, or another supported method.
- If you are already using Duo Push, you are not affected and can continue authenticating as normal.
What You Need to Do
If you use SMS passcodes today, you’ll need to transition to one of the supported alternatives below.
Option 1: Duo Mobile App (Recommended)
Using the Duo Mobile app allows you to authenticate quickly and securely using push notifications. To use the app, follow the steps below:
- Install the Duo Mobile app on your smartphone or tablet.
- Follow the in-app instructions to activate Duo Push.
- When prompted during sign-in, approve the Duo Push notification instead of requesting an SMS passcode.
Option 2: Hardware Token (YubiKey)
If you do not have a smartphone or prefer not to use one, you may use a hardware authentication token such as a YubiKey.
- Hardware tokens can be purchased through the UIC WebStore.
- Active faculty and staff should first contact their college or unit IT support team to determine whether departmental guidance or funding is available.
Need Help?
If you have questions or need assistance setting up a new authentication method:
- Contact your college or unit IT support staff, or
- Visit help.uic.edu for self-service resources and support