University of Illinois Switches Authentication Systems
The University is moving to Microsoft Authenticator and discontinuing text message passcodes for student and staff logins.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust that switching to newer multifactor authentication apps effectively increases your personal data security?
The University of Illinois has begun a phased transition from Duo Mobile to Microsoft Authenticator for multifactor authentication. The university is also eliminating text message passcodes as an authentication option due to security concerns.
Why it matters
The change is part of a broader, multiyear strategy to simplify login processes while increasing account security across all university services. Officials are removing text message passcodes because they represent the least secure method of identity verification.
Users are required to download the Microsoft Authenticator app to verify identities during the sign-in process. The university provides a 14-day grace period to complete enrollment after an account holder receives their first prompt.
The players
University of Illinois
This is a public research university system that serves a large population of students, faculty, and staff across the state of Illinois.
Technology Services
This department manages the IT infrastructure, cybersecurity protocols, and digital service access for the university.
The details
Students and staff must download and configure the Microsoft Authenticator app to maintain access to university services. This transition permanently replaces the previous Duo Mobile platform and eliminates the use of SMS-based passcodes.
Timeline
October 19, 2026: The University began the transition to Microsoft Authenticator.
Mid- to late November 2026: Most users are expected to have completed the switch.
End of 2026: The mandatory phase-in registration period concludes.
Spring 2027: Duo Mobile will be officially decommissioned and unavailable.
The Tech Race
The adoption of Microsoft Authenticator follows a broader industry trend of phasing out SMS-based two-factor authentication in favor of app-based push notifications. This shift moves the university away from older security standards and positions it to implement more advanced passwordless protocols.
Users will face a mandatory 14-day enrollment window after their first system prompt to adopt the new app. Students and staff should direct technical questions or issues to the IT Service Desk, which operates weekdays from 8 a.m. to 9 p.m. and weekends from noon to 5 p.m.
The takeaway
The move away from SMS passcodes marks a significant upgrade to institutional account security. Users should ensure their devices are compatible with the new authenticator app well before the Spring 2027 deadline to avoid losing access to university systems.
Further reading
For more information on digital security protocols, visit the Cybersecurity section.
Source note: This article includes information reported by The Daily Illini.
Live Poll
Do you trust that switching to newer multifactor authentication apps effectively increases your personal data security?
