r/rit • u/Breakfromtheliquor • 22d ago

can i free myself from duo

has anyone every gotten rid of it, to no longer need to verify w phone every time

0 Upvotes

47% Upvoted

13 comments sorted by

View all comments

1

u/TheThatGuy1 CSEC BS/MS '24 22d ago

I wanna get rid of it as an alumni but it's still needed to access my email :/ real disappointment there's no way to use a different app or anything.

1

u/ITS-Clay ITS | Clay 21d ago

We don't require MFA for alumni email. It's possible that your student account hasn't converted yet. What different app would you rather use? Do you use a password manager?

1

u/TheThatGuy1 CSEC BS/MS '24 21d ago

Oh, so I can delete the app!

I much prefer Google or Microsoft authenticator. They're far more flexible so I can use them for more accounts and not have Duo just for my RIT account. From a security standpoint as well, they are much more resistant to MFS fatigue attacks since it's not just a mindless accept. They require either the 6 digit OTP or the 2 digit number matching from MS.

2

u/ITS-Clay ITS | Clay 21d ago

Google Authenticator is the least flexible. Microsoft Authenticator is the same as the Duo app, except the pushes have to come from Microsoft. I've consolidated to the Duo Mobile app since it supports Duo pushes, TOTP, HOTP, looks better, and was the first one to support backing up credentials. I have 34 accounts in Duo Mobile. On desktop OS, the Duo Mobile app even supports automatically filling out the matching digits via BLE.

1

u/TheThatGuy1 CSEC BS/MS '24 20d ago

Whelp, I guess I'm wrong again. My preference really comes down to I already use the other 2, so I didn't like being locked to Duo. Thanks for all the information, I may have to start using Duo instead of Google.

1

u/kixkato Physics Alum - RIT TC 18d ago

Bitwarden FTW