If you get a Two-Step Login (Duo) request that you didn't initiate

Do not accept a Two-step login request from Duo that you did not initiate. Denying the request keeps someone with malicious intent from accessing your information, even if that person knows your IU username and passphrase.

Note:

You will receive email notification when your personal information is accessed or changed, with instructions about what you should do if you did not initiate the request.