Don’t recognize that Duo notification? Don’t approve it, and change your password

Two students consider something on a laptop screen outdoors on UB's north campus.

Published May 26, 2022

If you receive a Duo push notification for your UBIT account, but you aren’t trying to log in, don’t approve it! Instead, mark it as fraud: someone could have your password and be trying to log into your account.

If you receive a Duo notification and you don’t know where it came from, log into the UBITName Manager and change your password immediately. This is especially important if you use the same password for other accounts (which isn’t a good idea).

Sometimes attackers will even send multiple pushes in a row to try and annoy you until you click Approve. The same advice applies as before: mark the pushes as fraud, then change your password. The sooner you change your password, the sooner the annoying push messages will stop.

Guide: How to change your UBITName password using the UBITName Manager

New password, strong password. Every time.

Print

It’s important to always use a new, secure password for every online account, and this scenario is the reason why. While Duo will likely protect you from someone with your password trying to access your UBIT account, it can’t stop them from trying the same email and password on other popular sites.

Stay safe!

If you believe someone may have unauthorized access to your UBIT account, contact the UBIT Help Center immediately—they’ll help you reclaim and secure your account.

For more tips to protect yourself online, visit buffalo.edu/ubit/safe.