As of Tomorrow NASBA Will No Longer Text One-Time Passcodes

OTP and laptop

A bit of serious news that you should have seen already if you are a CPA candidate: As of June 17 at 10am Central, NASBA is changing up its multi-factor authentication (MFA) process.

The headline of their blog post mentions only Okta Verify as the “required” MFA platform they want you to use from now on but drilling down into the details we see they’re also allowing Google Authenticator. What they aren’t allowing anymore are one-time passcodes (OTP) via SMS or phone call. NASBA states they’re making this change because these are “more secure authentication methods.”

There are links to setup either Okta Verify or Google Authenticator on your devices over on NASBA’s blog and you are encouraged to do this as soon as possible. The extra cybersecure among you may elect to do your own research on the tool before blindly slapping it on your phone just to be safe, as you should do with anything you put on your devices.

Happy MFAing!

Leave a Reply

Your email address will not be published. Required fields are marked *