Duo Two-Factor Authentication

Why two-factor authentication?

Passwords simply aren't enough anymore. Over the past few years, phishing and identity-theft crimes have increased dramatically in higher education. By requiring you to verify your identity with a device, Duo adds another layer of security in front of the information, accounts, and assets you access using your NetID.  Even if your password is stolen, your information remains protected.

Due to the high risk associated with access to our Banner system, we will make Duo mandatory for Banner users in June. Other NetID logins will follow in the Fall semester of 2020.

Project timeline

Phase 1:
Voluntary enrollment
Completed
Phase 2:
Mandatory for Banner users (Including Banner, UC4, Cyberbear, Banner Test, UC4 Test, and Cyberbear Test)
June 17, 2020
Phase 3:
Mandatory for students (Including UMConnect Email, Moodle, Cyberbear)
Mid fall semester
Phase 4:
Mandatory for all employees, affiliates, and alumni (Including UM Box, Qualtrics, Zoom, Cyberbear)
End of fall semester

How does Duo work?

1. Enter your username and password. 2. Verify your identity with phone or token. Securely logged in

Much like online banking and credit card companies, your identity is being verified with a second layer of security. Most common is a “push notification” sent to your smartphone, but verification can also be completed with a call or a hardware token.

Check out this short video that shows just how easy this process can be.

Supported devices

Smartphone, token, telephone, USB, smartwatch

The most convenient and reliable device is your personal smartphone. Most of us have our smartphone readily available and there is no cost to you or the University to use your smartphone. You can also use any phone number (landline or cell) to receive a call.  Also, registering a backup device is highly recommended.  This will cover situations where your primary authentication device is lost, damaged, or changes.

If you don't have a smartphone, or decline to use it, the University can issue a hardware token device. The disadvantage of using a hardware token is it is another device you will have to keep track of and there is a cost to the University in issuing the token.

Questions? Ready to enroll?

For more information about enrolling in Duo two-factor authentication:

If you're ready to begin, visit our enrollment page.