CaTS | Photo by Brett Hull | The Wright State Guardian
Wright State University (WSU) announced a required two-factor authentication for student, staff and faculty accounts to increase security.
Two-factor authentication
Computing and Telecommunications Services (CaTS) sent an email to WSU students, staff, and faculty announcing the new two-factor authentication being added to WINGS accounts on Oct. 19. CaTS added the two-factor authentication when logging into a WINGS account in order to add increased security.
“Over the last couple of months, Wright State has been subject to multiple attempts by external scammers to gain access into students’ accounts,” the email states.
Safety concerns
Two-factor authentication will protect students from phishing attacks, according to Chief Information Security Officer (CISO) Mike Natale.
“[Two-factor authentication] provides an additional layer of protection on the user’s account beyond a username and password,” Natale said.
Natale said that scammers target information like students’ social security, phone number and address. Scammers can use this information to get more out of students including finding their social media and gaining more personal details.
Natale explains this makes it easier for scammers to target other personal data like bank account information.
“Oh, I know this person’s social security number. I know their address. So I’m going to call the bank and say I am this person, and I’m armed with all the data’,” Natale said.
Student protection
Natale warns students that they should be careful of what they download and watch out for email accounts that may be impersonating a WSU account.
Students can use their smartphones for free to add two-factor authentication, according to the Manager of Information Security (MIS) John Remley. Natale says students will be given one free key fob with a code they can use if they do not own a smartphone.
“Using the smartphone app is free and it’s very convenient and the preferred way,” Remley said.
Students can add two-factor authentication today and will be required to do so by Jan. 31, 2022, according to the email.
