Multi-Factor Authentication Number Matching – Effective October 31

Primary tabs

As part of our ongoing efforts to strengthen account security, HCPSS will enable Duo Number Matching for multi-factor authentication (MFA), effective this Friday, October 31, 2025.

This enhancement, also known as Verified Push, adds a short verification step to help prevent accidental or fraudulent approvals during login.

What’s Changing?

When logging in with Duo Push, you may occasionally see a three-digit number on your computer or device screen. To approve the login, simply select or enter that same number in the Duo Mobile app.

This feature helps ensure that only legitimate login attempts are approved, significantly reducing the risk of phishing or “push fatigue” attacks.

What You Need to Know

  • The change takes effect Oct. 31, 2025.
  • The number prompt may appear intermittently when using Duo Push through the Duo Mobile app.
  • Duo Number Matching only applies to Duo Mobile push notifications, not YubiKey USB keys. If you use a YubiKey (USB key) for MFA authentication, this change does not affect you.

Call to Action

No immediate action is required. On Friday, Oct. 31 when you next login and are prompted for number matching, simply follow the on-screen instructions.

If you have any questions, contact Technology Support at (410) 313-7004 (option 4) or TechSupport@hcpss.org

Together, we can make HCPSS more secure — one smart click at a time.