Changes to ArchPass, powered by Duo, coming Aug. 2

To help combat significant increases in payroll fraud and other scams, EITS is making changes to UGA’s two-step login solution, ArchPass, powered by Duo, on Friday, Aug. 2.

ArchPass provides a second, critical layer of protection by verifying your identity when you log in to the UGA applications you use every day, such as Athena and UGAMail. You currently choose how to verify your identity using either a push notification to the Duo Mobile app, a passcode generated in the app, a phone call, or an SMS text message. The upcoming changes will affect several of these features.

The following changes to ArchPass include:

• Passcodes generated in the Duo Mobile App will expire 30 seconds after generation to keep threat actors from gaining access to your credentials through a phishing attempt.
• Passcodes sent through SMS text messages will expire after five minutes and Duo will only send one SMS at a time, regardless of the Duo-protected application you are trying to access.
• When you enroll or remove a device from your Duo account, you will receive a push notification in the Duo Mobile app and an email to your UGAMail address to ensure scammers cannot use devices to access your information or UGA systems. An example of this email is available on the EITS website.
• Lastly, the Duo Self-Service Portal at archpass.uga.edu will have a new look and feel using Duo’s universal authentication prompt. When you log in to the Duo Self-Service Portal to manage, add, or remove devices in your account, it will look the same as the Duo prompt for Single Sign-On, Athena, and many other UGA applications.

Learn more about ArchPass by visiting the EITS knowledge base.

For more information on any of these changes, please visit the EITS website or contact Ben Myers.