Office of the Chief Information Security Officer

Cybersecurity is essential for protecting sensitive information, systems, and networks from unauthorized access, theft, and damage. In today’s digital world, personal, financial, and organizational data are highly valuable and targeted by cybercriminals. Enhanced security measures like Verified Duo Push help reduce the risk of unauthorized access and cyberattacks.

This change is part of UC’s proactive approach to improving security across its systems. It reflects the growing need to stay ahead of evolving cyber threats and ensures UC is taking all necessary steps to protect your data.

No, this change currently impacts only UCPath. This initiative marks a step toward unifying and securing all UC systems in a seamless and interconnected way.

Verified Duo Push enhances multi-factor authentication (MFA) by requiring users to:

1. Receive a push notification on their Duo Mobile app.
2. Enter a four-digit verification code displayed in their browser into the Duo Mobile app.

This process ensures that only verified users can approve login requests, reducing the risk of unauthorized access.

Verified Duo Push requires:

• Android: Duo Mobile 4.49.0 or later, on Android 8 or later.
• Apple: Duo Mobile 4.49.0 or later, on iOS 13 or later.

Unless you are placed on the exception list, you may experience interruptions when trying to access UCPath. To avoid disruptions, ensure your Duo Mobile app is updated.

If you lose your device:

• Contact the ITS Help Desk to set up the Duo Mobile app on your new device.
• A limited one-day bypass code may be issued temporarily to ensure uninterrupted access while resolving the issue.

Users with university-issued physical tokens (e.g., Duo D-100) can continue using them until January 31, 2025. After this date, additional actions may be required to transition to Verified Duo Push.

ITS Help Desk: (310) 267-HELP (4357)

• Visit the Office of the Chief Information Security Officer website for detailed guides and resources.
• Watch this step-by-step video on using Verified Duo Push to access UCPath.

• December 20, 2024: Verified Duo Push becomes mandatory for all UCPath users.
• January 31, 2025: Deadline for users with exceptions (e.g., physical token users) to transition to Verified Duo Push.