<body><div><figure><img src="https://img.particlenews.com/image.php?type=thumbnail_580x000&amp;url=3x64pz_1H0JbOkE00" alt="https://img.particlenews.com/image.php?url=3x64pz_1H0JbOkE00" width="1200" height="800" ></figure>Columbia University Information Technology announced that it will phase out phone calls and text messages as methods of multi-factor authentication by the end of January, first notifying users of the change Oct. 23, a University official told Spectator. According to CUIT, if users do not set up another method of authentication before their deadline, they will be locked out of Columbia systems until they do so.The change comes amid growing concerns over the security of texts and calls. The official said that over the past year, hackers compromised some Columbia accounts through methods such as intercepting text messages, stealing phone numbers, and tricking users into approving verifications. Across the nation, universities are shifting toward other verification methods such as push notifications or biometrics.Columbia uses Duo—an identity and access management system owned by Cisco—as its multi-factor authentication service for its applications, including Courseworks, Columbia Health, View Your Paycheck, and Columbia VPN. CUIT’s current methods of authentication include the Duo Mobile app, Touch ID or Face ID, a physical security key or hardware token, and an SMS passcode or phone call. According to CUIT, most people use the Duo Mobile app for verification, which is its recommended option. Phone calls and texts, it states, are the weakest options.Faculty and staff currently using texts or calls have until Dec. 7 and 10, respectively, to switch to another method of authentication, while students, alumni, and all other accounts have until Jan. 5, 11, and 14, respectively.If no alternative authentication options work, users can request a temporary exception to continue using phone and text verification. All exceptions end on Jan. 28. Faculty and staff have until Dec. 2 to request an exception, while other accounts have until Dec. 11.As CUIT’s website explains, hackers target call and text specifically: Phone numbers can be moved to devices hackers control, text messages can be intercepted, and hackers may repeatedly call users in hopes that they accidentally approve an authentication request. These are forms of attacks which other authentication methods are resistant to. “Once inside, attackers redirect pay and refund deposits, open personal and academic records, and use the account to send convincing phishing messages to other members of the community,” CUIT wrote. Duo states on its website that text and call verification should be “eliminated when possible” and describes these methods as “inherently insecure.” The Cybersecurity and Infrastructure Security Agency similarly recommends against using SMS for authentication, additionally noting that texted codes are vulnerable to phishing attacks.Columbia’s shift away from texts and calls follows a suite of recent cybersecurity changes made following a 2025 data breach, such as increasing its capabilities to detect unusual activity. That breach saw a hacker steal data, including contact information and Social Security numbers, from nearly three million individuals in the University’s systems, some of whom were nonaffiliates.Staff Writer Ethan Bordoff can be contacted at ethan.bordoff@columbiaspectator.com. Follow Spectator on X @ColumbiaSpec.Want to keep up with breaking news? Subscribe to our email newsletter and like Spectator on Facebook. </div></body>

Block Source: Columbia Spectator

Misinformation

Clickbait

Old or repetitive news

Explicit content

Location not relevant

Columbia University Information Technology announced that it will phase out phone calls and text messages as methods of multi-factor authentication by the end of January, first notifying users of the change Oct. 23, a University official told Spectator. According to CUIT, if users do not set up another method of...

Columbia announces end of text messages, calls as multi-factor authentication methods

NewsBreak

Columbia University Information Technology announced that it will phase out phone calls and text messages as methods of multi-factor authentication by the 

Columbia announces end of text messages, calls as multi-factor authentication methods

Comments