Limiting Duo text codes to protect Rowan from scams

In response to ongoing cyber attacks against Rowan University, Information Resources & Technology is limiting less secure Duo two-factor authentication methods, specifically codes sent by text message. 

We strongly recommend you set up the Duo Mobile app or hardware token now to prepare. 

What’s Changing, and When?

To update your Rowan NetID password on or after Wednesday, January 7, 2026, you must have the Duo Mobile app or a hardware token registered on your account. You will no longer be able to receive Duo codes via text message.

The option to receive Duo codes sent by text message has already been phased out for incoming students and employees, as well as current students and employees whose accounts have been compromised in a phishing attack.

What Should You Do Now?

Set up the Duo Mobile app — our preferred authentication method — if you don’t already have it. The Duo Mobile app helps prevent phishing attacks and account lockouts. Follow our step-by-step instructions for setting up Duo Mobile to get started with the app today, or learn more about Duo Mobile.

You may also request a hardware token and add it to your account as an alternative method. 

Why Are We Making This Change?

Since the beginning of this semester:

• Nearly 60 Rowan accounts have been compromised through phishing attacks. 
• Hackers used those accounts to send more than 79,000 malicious emails that appeared to come from members of the Rowan community.

The majority of these attacks started with a stolen Duo code. Text message codes are prime targets for hackers, as they can be easily targeted and used in phishing attacks. 

This problem is not unique to Rowan University. Colleges and universities are top scam targets, and, with generative artificial intelligence and other new technologies, we expect the frequency and sophistication of these scams to continue to rise. 

For those reasons, we are switching to more secure authentication methods like the Duo Mobile app. The app offers end-to-end encryption and other security features that make it harder for hackers to gain access to your account. 

Just one compromised account can lead to campus-wide disruptions. Together, we can create a safer digital environment.

Protect your account. Protect Rowan. Visit go.rowan.edu/protect for more tips.