Duo Two-Factor Authentication

 

 

 

 

 

 

 

Overview

2FA is required for all active student, staff, faculty, sponsored affiliates accounts and retirees to promote a safer online environment and to help safeguard York and the community's information security and privacy. This is particularly important during the pandemic and resultant remote working/learning, which has seen a dramatic increase in cyber-criminal activity and risk.

Helpful tips:
- Do NOT delete the Duo Mobile app after completing the 2FA Setup.
- Duo and Touch ID can only be used for web-based logins and will only work in Google Chrome 70 or later.
- Enable the 30-day "Remember Me" option by checking the box at login time to reduce how often 2FA is required on a particular trusted device.

 
What is 2FA?

Two-factor, two-step, or multi-factor authentication (MFA) is a security process that requires you to use two different authentication factors (methods) to verify your login. Think of your first factor as the lock on the front door of your house and the second factor as the door's deadbolt. The first factor is your Passport York password, and the second factor is a push notification, a code or call sent to your cellphone or a physical security key inserted into your computer. Two-factor authentication is the most effective way of protecting both your credentials and the resources you access with those credentials. With two-factor authentication, you can ensure that all your data remains safe, even if your password is compromised.

Why Do I Need This?

Two-Factor authentication adds an additional layer of protection to your accounts and the data you access through them. The easiest way for malicious hackers and phishers to access York's systems and data is by hijacking your account. With two-factor authentication, you are protecting yourself and your community against these sorts of attacks and ensuring each link in our security chain is strong.

How Does It Work?

  1. Enter your Passport York username and password
  2. Use one of the Duo Supported Devices to verify your identity
  3. You are securely logged in

 
When will I be prompted to authenticate with 2FA?

After you complete your 2FA Setup, you will be prompted to authenticate with 2FA every time you log in to Passport York web services and Office 365.

When will 2FA be activated?

The enrollment of Duo 2FA will begin on February 9th, starting with activation of those with surname beginning with "A", and proceeding alphabetically until all community members have been enrolled.

Surname Begins With Activation Date. Week of:
A February 09, 2021
B February 16, 2021
C & D February 23, 2021
E, F & G March 02, 2021
H, I, J & K March 09, 2021
L & M March 16, 2021
N, O, P & Q March 23, 2021
R & S March 30, 2021
T, U, V, W, X, Y & Z April 06, 2021

 

Helpful Resources

Duo Mobile System Requirements for Android and iOS

Download the Duo Mobile App for Android (version 8.0+)  and iOS (version 12.0+)

UIT recommends enrolling your smartphone with the Duo app for ease of use and best experience. If you don't have a smartphone, you can order your Duo hardware token at the YorkU Bookstore. When completing your Duo token order, please use your York University email address.

Once two-factor authentication is activated for your account, you have 14 business days to complete your setup. If you've ordered a duo token, your grace period will be extended to 30 days.

To begin, please choose one of the instructions below.

An Introduction to Duo Security

 

Authenticate with Duo Mobile (Android)

 

Authenticate with Duo Mobile (iPhone)

 

Authenticate with Duo Hardware Tokens

 

Authenticate with Mobile Passcodes

 

Authenticate with By-pass Codes

 

Authenticate with U2F

 

How to Enroll and Use Touch ID with Duo