A strong password is important, but it’s not the only way to protect your accounts.
Throughout October — Cybersecurity Awareness Month — the University Information Security Office and ODU’s School of Cybersecurity, in partnership with the Division of Enrollment, Transformation, and Technology, are teaming up to share simple cybersecurity practices that can help protect your accounts and information.
Multi-factor authentication (MFA) adds another layer of security by requiring more than just a password to verify your identity. At ODU, Duo MFA helps protect your account by asking you to confirm that it’s really you signing in.
Use MFA Beyond ODU
MFA isn’t just for your ODU account. Turn it on for the personal accounts and services you use every day, including email, social media, banking, shopping and other accounts that contain personal or financial information.
When available, choose MFA methods such as an authenticator app, security key or passkey to add another layer of protection beyond your password.
Why MFA Matters
According to the Cybersecurity and Infrastructure Security Agency (CISA), enabling MFA makes your accounts 99% less likely to be compromised.
Even if someone gets your password, MFA can help prevent them from accessing your account without your approval. When you sign in to an ODU system that requires MFA, you will receive a Duo notification asking you to approve the login. Only approve the request if you started the login yourself.
Don't Recognize the Request? Don't Approve It.
If you receive a Duo request that you didn't initiate:
-
Deny the request immediately.
-
Do not approve it just to make the notification go away.
-
Never share your Duo verification codes or prompts with anyone.
-
Report unexpected requests to the ODU IT Help Desk.
An unexpected Duo notification could mean someone has your password and is trying to access your account.
Keep Your Duo Account Up to Date
Make sure your registered devices and authentication methods are current at midas.odu.edu:
-
Remove old phones or devices you no longer use.
-
Update your Duo settings whenever you get a new phone or phone number.
-
Set up a secondary backup device so you're never locked out.
-
Never approve or add an authentication method you did not request.
Take a Quick MFA Check
Take two minutes this week to ask yourself:
-
Do I know what a legitimate Duo request looks like?
-
Would I deny a Duo request I didn't initiate?
-
Are my registered Duo devices and authentication methods up to date?
-
Have I enabled MFA on my personal accounts where it's available?
-
Do I know how to report an unexpected Duo request?
Remember: You are the final step. If you didn't initiate the login, don't approve the request.
Upcoming Cyber Awareness Events
Cybersecurity “Show of Force” Day
October 20, 10:00 a.m. to 2:00 p.m.
Webb University Center, South Mall
Join the University Information Security Office, ODU’s School of Cybersecurity, and national cybersecurity vendors for interactive activities, games, discussions, and general cybersecurity awareness (including swag!).
Talk with cybersecurity professionals from Palo Alto, Varonis, and Cribl, and hear from ODU students who are gaining hands-on experience through the Security Operations Center.
We look forward to seeing you throughout the day!
Want more tips? Check out @oduett_ on social media throughout Cybersecurity Awareness Month for quick guides, Duo tips, and security reminders!