Another tip in a series provided by the Offices of Information Security, Information Systems & Computing and Audit, Compliance & Privacy
Two-Step Verification helps protect your accounts by asking for a second form of confirmation when you sign in. Choosing a stronger verification method can make your account safer.
People often choose SMS or text messages for verification because they are familiar and easy to use. For many accounts, SMS/text was the primary verification method offered, and sometimes it was the only option available.
However, SMS/text is not the most secure choice for verification.
There are several risks to using SMS/text for verification. An attacker may be able to transfer your phone number to another device through phone number porting or SIM swapping. SMS/text verification codes can also be stolen through phishing or social engineering and used to gain access to your accounts. In addition, text messages may sometimes be delayed or unavailable because of coverage or network issues.
Some of these risks also apply to using phone calls for verification.
Penn is moving away from SMS and phone calls for Two-Step Verification. These verification options will be phased out on February 23, 2027.
When you enroll in Two-Step Verification for your PennKey, you can add additional verification methods. You should do this whenever possible. Penn offers several alternatives, including Duo Push, passcodes generated by the Duo Mobile app, Touch ID on supported devices, Duo hardware tokens, and security keys. Having multiple verification methods can help prevent you from being locked out of your account if one method fails or is not available.
Review your Two-Step Verification settings and make sure you have another verification method configured before SMS and phone call verification are phased out.
For more information:
For additional tips, see the One Step Ahead link on the Information Security website: https://isc.upenn.edu/security/news-alerts%23One-Step-Ahead.
Almanac is the official weekly journal of record, opinion and news for the University of Pennsylvania community.
© 1954- The University of Pennsylvania Almanac.
3910 Chestnut St., 2nd Floor, Philadelphia, PA 19104-3111

source