{"id":843,"date":"2025-08-12T12:34:14","date_gmt":"2025-08-12T16:34:14","guid":{"rendered":"https:\/\/www.bu.edu\/hipaa\/?p=843"},"modified":"2025-08-12T12:34:14","modified_gmt":"2025-08-12T16:34:14","slug":"july-hipaa-security-update-duo-verified-push","status":"publish","type":"post","link":"https:\/\/www.bu.edu\/hipaa\/2025\/08\/12\/july-hipaa-security-update-duo-verified-push\/","title":{"rendered":"July HIPAA Security Update: Duo Verified Push"},"content":{"rendered":"<p style=\"font-weight: 400;\">In August 2025,<span>\u00a0<\/span><span>HIPAA<\/span><span>\u00a0<\/span>workforce members will switch from standard Duo Push to Duo Verified Push for two-factor authentication.<\/p>\n<p style=\"font-weight: 400;\"><strong>What is Duo Verified Push?<\/strong><\/p>\n<p style=\"font-weight: 400;\">Standard Duo Push involves simply tapping \u201cApprove\u201d or \u201cDeny\u201d on a push notification. Duo Verified Push adds a code verification step:<\/p>\n<ol style=\"font-weight: 400;\">\n<li>When logging in, a 4-digit code will be displayed on your computer or device screen.<\/li>\n<li>You receive a push notification in the Duo Mobile app on your phone.<\/li>\n<li>You must enter the 4-digit code from the screen into the Duo app to approve the login.<\/li>\n<\/ol>\n<p style=\"font-weight: 400;\">Visit the\u00a0<a href=\"https:\/\/www.bu.edu\/tech\/support\/duo\/duo-verified-push\/\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/www.bu.edu\/tech\/support\/duo\/duo-verified-push\/&amp;source=gmail&amp;ust=1755100851149000&amp;usg=AOvVaw0J2FsjaReVRAkWhAT8HLiF\">Duo Verified Push<\/a>\u00a0Tech Web page for more details.<\/p>\n<p style=\"font-weight: 400;\"><strong>Why is this change required?<\/strong><\/p>\n<p style=\"font-weight: 400;\">Verified Push improves security by ensuring the person approving the push notification has the code showing on the login screen. This change prevents accidental or fraudulent approval of login attempts, especially when repeated push requests are received (which can happen in phishing or account takeover attempts).<\/p>\n<p style=\"font-weight: 400;\"><strong>Have questions?<\/strong><\/p>\n<p style=\"font-weight: 400;\">For Duo Verified Push questions contact\u00a0<a href=\"mailto:ithelp@bu.edu\">ithelp@bu.edu<\/a>, and for questions about this change contact\u00a0<a href=\"mailto:buinfosec@bu.edu\">buinfosec@bu.edu<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In August 2025,\u00a0HIPAA\u00a0workforce members will switch from standard Duo Push to Duo Verified Push for two-factor authentication. What is Duo Verified Push? Standard Duo Push involves simply tapping \u201cApprove\u201d or \u201cDeny\u201d on a push notification. Duo Verified Push adds a code verification step: When logging in, a 4-digit code will be displayed on your computer [&hellip;]<\/p>\n","protected":false},"author":23516,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/posts\/843"}],"collection":[{"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/users\/23516"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/comments?post=843"}],"version-history":[{"count":1,"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/posts\/843\/revisions"}],"predecessor-version":[{"id":846,"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/posts\/843\/revisions\/846"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/media?parent=843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/categories?post=843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bu.edu\/hipaa\/wp-json\/wp\/v2\/tags?post=843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}