Common questions about Dartmouth's move from Duo to Microsoft Authenticator. For setup, see "How to Enroll"; this page covers the "why" and "what's changing."
General
Why do I need to use multi-factor authentication (MFA)? show/hide
A password alone can be easily compromise. MFA requires a second proof of identity, such as approving a sign-in through Microsoft Authenticator on your phone, before anyone gets in. Even if a criminal has your password, they are stopped without your device. It is one of the simplest ways to protect your accounts.
Why is Dartmouth moving from Duo to Microsoft Authenticator? show/hide
For stronger security, including better protection against password theft and fatigue-style attacks, all while bringing sign-in and multi-factor authentication onto the Microsoft platform, to streamline from two systems to one.
Do I need a new app? How do I get it? show/hide
Yes. Install "Microsoft Authenticator" from the App Store or Google Play, then enroll your Dartmouth account. Once you've moved, you no longer use the Duo app for Dartmouth sign-ins. See the "How to Enroll " section above.
When does this affect me? show/hide
You will be assigned a transition date by ITC. You will receive an email with the date and instructions on how to enroll about three weeks prior to your transition date. This gives you ample time to make the transition. Everyone is invited to enroll early, but you will not start using MS Authenticator until your transition date.
What happens to Duo? show/hide
When you move to Microsoft Authenticator, Duo will be retired for your account. As this is a rolling transition, some people in our community will still be on Duo while others will have moved to Microsoft Authenticator. Duo will be fully retired on August 3, 2027. After that date, it can no longer be used to sign in to Dartmouth applications, software, and services.
Why isn't text-message (SMS) or phone-call verification an option? show/hide
Text Message (SMS) it is the least secure verification option. An attacker can intercept a text or trick your phone carrier into transferring your number to another device, all without physical access to your phone. For this reason, security experts, including the FBI, advise against it.
Additionally, Microsoft will discontinue text-message and phone-call verification codes on February 1, 2027. This method will soon be unavailable to anyone using Microsoft Authenticator, regardless of Dartmouth's preferences.
Can I use Microsoft Authenticator for more than one account? show/hide
Yes. The app is designed to store several accounts at once, such as your regular NetID account and any administrative account you may also have. Set up each one the same way by signing in with that account at mysignins.microsoft.com/security-info.
Can I use it when traveling internationally? show/hide
Yes. As long as you have an Internet connection, you can approve a number-matching prompt from anywhere.
What happens if I don't enroll in Microsoft Authenticator? show/hide
Once your transition date passes, Duo will no longer work for you. Ff you haven't set up Microsoft Authenticator, you won't be able to sign in using your Dartmouth account. Contact your Service Desk or IT Support Desk (see the "Need Help?" section below) and they'll help you regain access and get enrolled.
What if I use the Duo app for non-Dartmouth services? show/hide
This change only affects how you sign in using your Dartmouth account. You can keep using Duo for any non-Dartmouth services or applications.
I'd like to use passkeys. How do I set it up? show/hide
Contact the Service Desk or your IT Help Desk (see the "Need Help?" section below) and your IT Support Team will assist you with setting up a passkey.
Troubleshooting
I do not have a smartphone, or my device is not compatible. What do I do? show/hide
Contact the Service Desk or your IT Help Desk (see the "Need Help?" section below) and your IT Support Team will assist you with the best, most secure option for you.
I got a new phone or device. What now? show/hide
You will need to register the new device. See the "Replacing or Losing Your Phone" section above. Microsoft Authenticator doesn't restore from a phone backup.
If you do not have access to your original device, contact the Service Desk or your IT Help Desk (see the "Need Help?" section below) and your IT Support Team will assist you
I got a sign-in prompt I didn't expect. What do I do? show/hide
Don't approve it. If you didn't just try to sign in, assume someone else is attempting to use your password: choose "No, it's not me" to deny the request, then contact the Service Desk or your IT Help Desk (see the "Need Help?" section below) and change your password.
I'm locked out of my account. What do I do? show/hide
Too many failed attempts can temporarily lock your account. Contact the Service Desk or your IT Help Desk (see the "Need Help?" section below) and and they'll help you get back in.
Security
Do I have to use my personal phone? show/hide
The Microsoft Authenticator app works on a personal or Dartmouth-provided smartphone. If you don't have a smartphone, contact the Service Desk or your IT Help Desk (see the "Need Help?" section below) and your IT Support Team will assist you.
What can the app see on my device? show/hide
The Microsoft Authenticator app cannot read your other apps or personal data, and it does not track your location in the background. It uses your camera only once, during setup, to scan the QR code. It also stores a small file on your phone that confirms the device is yours, which is what allows the app to authenticate your sign-ins.
What operating systems does it support? show/hide
The app supports current versions of iOS and Android. Microsoft only supports recent versions of the app. It is important to keep both your phone's operating system and the app up to date. Out of date versions may stop working.