Why is Duo required?
The more services that exist online and in the cloud, the more potential places there are for hackers to be able to find exploits that allow them to compromise your accounts and/or personal information. Duo helps ensure you and only you can access MIT resources, your sensitive personal data, and use your account. A compromised account can mean your sensitive personal data is accessed by an untrustworthy attacker or your account could be used to launch other attacks or send unsolicited emails. Accounts used to send SPAM or that otherwise violate the MITnet policies will to be suspended making you unable to utilize MIT IT services until the issue is resolved. While having to use Duo may seem an inconvenient extra step, it is much preferable to having to recover from a compromised account.
See Also
- For more information on why MIT is moving to Duo authentication, see the Faculty Newsletter article Why MIT Is Implementing Duo Two-Factor Authentication