Duo Verified Push

Duo Verified Push

What is Duo verified push?

Duo verified push is a more secure form of call and response as your second factor when attempting to login to UNI resources. UNI moved to verified push for all Duo multi-factor authentication (MFA) in August of 2025.

With Duo verified push now active for all UNI accounts, you will be required to enter a four-digit code from your login screen into the Duo Mobile app before approving access. Because this code is only visible to you at the time of login, it ensures that only intentional logins are approved and prevents attackers from exploiting stolen passwords through repeated push requests, a tactic known as “push fatigue.” If your browser has “remembered” your Duo login, you may not see the change until the next time you are prompted.

The new prompt on your computer screen will look like this:

Duo verified push prompt on my computer showing me a 4 digit code that I need to type in on my phone

 

The new prompt on your smartphone or tablet will look like this:

Duo verified prompt on my smartphone showing me the same 4 digit code from my computer screen

 

What you should do

If you use Duo Push:

  • Continue logging in as usual.

  • When prompted, enter the four-digit code from your login screen into the Duo Mobile app and tap Verify.

  • If you ever see a code in the Duo app when you are not logging in, tap “I’m not logging in.” This alerts UNI IT Security to potential malicious activity.

 

If you use other Duo methods:

  • You will continue logging in the same way.

How is Duo Verified Push more secure than Duo Push?

  • Standard Duo Push can be targeted by “push fatigue” attacks, where hackers repeatedly send login requests in hopes you’ll approve one out of habit or frustration.

  • Verified Push requires a matching four-digit code, ensuring the push request came from you.

  • Multiple failed or declined attempts alert UNI IT security to investigate.

What are the requirements for Duo Verified Push?

To use Duo Verified Push, make sure your Duo Mobile app and device are up to date:

  • Android: Duo Mobile 4.16.0+ on Android 8 or higher

  • iOS: Duo Mobile 4.17.0+ on iOS 13 or higher

How is a Verified Push code different from Duo Passcodes?

Verified Push Codes: Appear on your login screen after initiating a browser-based login; you must enter this four-digit code in Duo Mobile to approve the login.

Duo verified push 4 digit code

Duo passcodes: six-digit numbers generated in Duo Mobile without initiating a login; used by selecting “Duo mobile passcode” from the “other options” menu.

Duo mobile app passcode