Another tip in a series provided by the Offices of Information Security, Information Systems & Computing and Audit, Compliance & Privacy

When you use your PennKey to log in to Penn resources, two-step verification is an extra layer of security that helps to protect your privacy and Penn’s data.

In situations where two-step verification is required, you usually have a choice between confirming your identity via the Duo Mobile app or via SMS/text.

The Duo Mobile app, which will “push” a notification to your cell phone when you try to log in, is the recommended option—not only is it more secure, it’s also far speedier and more reliable.

Using Duo Mobile instead of SMS/text offers the following benefits:

1. Duo Mobile is a “one tap” time-saving solution—no need to type in verification codes.
2. Duo Mobile can be used even when you do not have a steady data or Wi-Fi connection, acting much like a standalone key fob.
3. You can rely on Duo Mobile when you are overseas, where SMS/text may not work as expected.
4. Using the stand-alone Duo app means that two-step verification information will not be lost within the stream of SMS/texts you may have.

There are also additional downsides to using SMS/text for two-step verification:

1. When issues arise with cell phone carriers, SMS/texts may be delayed — which means you cannot log in when you need to.
2. SMS/text has become an ever-increasing target for exploitation by malicious parties. Fake SMS/text messages can be used to compromise and break into accounts.
3. Depending on your cell phone plan you may be changed per SMS/text.

The takeaway? Duo Mobile is the fastest, safest, most reliable way to perform two-step verification when needed. If you don’t have it yet, why not start today?

For more information about using two-step verification with Duo Mobile see: https://www.isc.upenn.edu/how-to/two-step-verification-getting-started.