Phish Files
Abstract Aliens On Flying Saucers Northern Lights Lighthouse Mountains Water Tree Sun Background Gradient Unidentified Flying Object Ufo Stars Vector Design Style Landscape
Phish Files Articles
January 12, 2026

Action Required: Update the Duo Mobile App by February 2, 2026

Posted in: News

A green digital-themed graphic with a shield and lock icon displays the text "ACCOUNT UPDATES."

Duo is updating its security certificates on February 2, 2026. If your Duo Mobile app is not up to date, Duo will stop working and  you may not be able to log in to University services that require multi-factor authentication (MFA).

Who needs to take action

  • Android users running Android 11 or later
  • iPhone/iPad users running iOS 15 or later

What you need to do

Check your Duo Mobile app version and update if needed.

To check your Duo Mobile version:

  1. Open the Duo Mobile app.
  2. Tap the three-line menu (upper-left corner).
  3. Look at the version number at the bottom of the menu.
    1. If your version is 4.85 or higher → No action needed
    2. If your version is below 4.85 → Update required

To update Duo Mobile:

  1. Open the App Store (iOS) or Google Play Store (Android).
  2. Search for Duo Mobile.
  3. Tap Update (If you see Open, your app is already up to date).

Older Android devices

If you use an older Android device, Duo provides special versions:

See Duo Knowledge Base article 2211 for instructions on installing these versions. 

Important: Duo does not support non-standard Android devices (such as Huawei devices) or devices running customized Android versions (e.g., OxygensOS).

Why we recommend using the Duo Mobile app (Duo Push)

Duo Push through the Duo Mobile app is the most secure and easiest way to approve logins.

  • Cryptographically secured: Uses end-to-end encryption between the University and your device, making it extremely difficult to intercept.
  • Free and convenient: No cost for faculty or staff, even when traveling. Duo Push works with Wi-Fi or cellular data, and passcodes are available offline.
  • Context-aware: The app shows the application you are logging into and the geographic location of the login attempt, helping you quickly spot and deny suspicious activity.

Remember: If you receive a Duo Push you do not recognize, deny it immediately and change your password.