Every day students log into their WSU accounts using SMS messaging as their multi-factor authentication method of choice, whether it be signing into Canvas, MyWSU or their email. Starting March 25, SMS will no longer be a MFA option for students to use across the WSU system.
According to WSU’s Information Technology Services website, they were informed that SMS and voice call MFA options would not be available after their contract renewal in June. The school is preparing for this by getting students to update their MFA settings now.
Students who do not update their MFA settings will be locked out of their WSU accounts. The March 25 deadline comes 13 days before priority registration begins for the fall semester.
The methods are being removed because of the security risk they have. SMS messages are not safe because they are not encrypted. SMS also happens to be the most popular MFA option that WSU students use.
All current WSU accounts will not have to update their settings until March 25, but new WSU accounts will not have the SMS and call MFA options starting Jan. 21.
Methods to replace SMS and calling options are Okta Verify, Okta FastPass, Google Authenticator, a physical security key and using fingerprint or facial recognition.
Okta Verify sends a push notification to students’ phones, Okta FastPass sends a notification to students’ PCs and Google Authenticator will send students a one time use passcode. Okta methods and Google Authenticator will requires students to download an app.
An email from the Crimson Service Desk said that students who need help with the changes can visit them in Holland 150 or join them on Zoom.
The Crimson Service Desk can also be reached by phone at 509-335-4357 and email at [email protected].