This data sheet introduces Duo Proximity Verification, a phishing-resistant MFA method designed to block modern identity attacks while remaining easy to deploy. The solution verifies both “Right Site” and “Right Here” before an authentication approval is shown. Duo Desktop confirms the legitimate login URL, while Duo Mobile uses Bluetooth Low Energy to ensure the user’s phone is physically near the logging-in device. This dual verification prevents push phishing, MFA fatigue, SIM swap attacks, and adversary-in-the-middle relay attacks. The document contrasts Proximity Verification with other phishing-resistant MFA options such as passkeys and hardware security keys, which offer strong protection but face challenges related to cost, logistics, mixed device environments, and user behavior ch

Join for free to read