Switch to Duo Mobile app
News
Posted on Tuesday 20 October 2026
As part of our ongoing work to protect University accounts, we are encouraging everyone to move to stronger multi-factor authentication (MFA) methods.
If you currently receive Duo Mobile codes by text message (SMS), we recommend switching to the Duo Mobile app. The University is also phasing out SMS as a default authentication method, so switching now will help make the transition as smooth as possible.
Why switch?
- Faster - No waiting for a text to arrive.
- Works without signal - Duo Mobile can generate passcodes without a mobile signal or data connection.
- More secure - Text messages can be intercepted or redirected. Verified Push adds an extra layer of security by asking you to enter a code displayed on your sign-in screen, helping ensure that only you can approve the sign-in request.
- Recommended practice - The National Cyber Security Centre (NCSC) advises treating SMS as a last resort.
Setting up Duo Mobile takes a few minutes:
- Download Duo Mobile from the Apple App Store or Google Play Store.
- Go to Duo York and add your phone as a device.
- Sign-in using the app, then set it as your default method.
Read more about Duo two-factor authentication, including helpful guides and answers to frequently asked questions.
If you are unable to use the Duo Mobile app, please contact itsupport@york.ac.uk to discuss your options.