On Monday, May 13 at 9:00am, additional security measures will be updated for Duo.

• SMS codes will now expire after five minutes.
• HOTP (HMAC-authenticated one-time passcodes) will be disabled so only TOTP (time-based one-time passcodes) will be allowed for use within Duo.
• Voice, push, and recovery codes will still be supported and will not change.

Users with the Duo app version 4.49.0 or older will not be able to use TOTP until they update the app, but Duo push will not be impacted.