Using 2FA

Once you are enrolled in 2FA, depending on the type of device (e.g., smartphone, tablet, mobile or landline phone, or token) you registered, you will have various options for verifying your identity when you want to log in to any 2FA-protected website or service. As a reminder, it is highly recommended you register at least two devices to ensure uninterrupted service should you not have access to one of your registered devices when attempting to log in to a protected website or service.

After enrolling in 2FA and when attempting to log in to any 2FA-protected website or service, you will:

Step One

Log in to the website or service in the same way you do today, using your CNetID (or UCHADID) and password. Next, you will be presented with the Duo verification screen, where you will verify your identity using 2FA.

Step Two

From the Duo verification screen, choose the method you prefer to use to verify your identity and then follow the steps to complete the login process. The options available to you to verify your identity are highlighted below.

Your options by device for verifying your identity include:

Smartphone

A smartphone (a cell phone that allows you to download and install apps) provides the greatest number of verification options:

  • Duo Push (Duo Mobile app required): Select “Send Me a Push” on the Duo verification screen in your web browser. Once selected, the Duo Mobile app on your smartphone will indicate a pending verification request. Confirm by tapping on the “Approve” button in the Duo Mobile app on your smartphone. Note, this option requires an Internet connection and/or cellular data service.
  • Passcode (Duo Mobile app required): Tap the green key button associated with the University of Chicago entry in the Duo Mobile app on your smartphone, to receive a six-digit passcode. On the Duo verification screen in your web browser, select “Enter a Passcode,” type the six-digit code into the “Passcode” field, and hit “Log In.” This option will work without an internet connection and/or cellular data service (e.g., when traveling on an airplane or internationally).
  • Phone call (Duo Mobile app not required): You can choose to have Duo place an automated call to your smartphone. On the Duo verification screen in your web browser select “Call Me.” Your smartphone will ring and after answering the call, you will follow simple prompts to verify. Note, this option requires cellular service.

Mobile Phone

A mobile phone (a cell phone that does not allow you to download and install apps) has one verification option:

  • Phone call: You can choose to have Duo place an automated call to your mobile phone. On the Duo verification screen in your web browser select “Call Me.” Your mobile phone will ring and after answering the call, you will follow simple prompts to verify. Note, this option requires cellular service.

Tablet

A tablet provides some of the same verification options as a smartphone:

  • Duo Push (Duo Mobile app required): Select “Send Me a Push” on the Duo verification screen in your web browser. Once selected, the Duo Mobile app on your tablet will indicate a pending verification request. Confirm by tapping on the “Approve” button in the Duo Mobile app on your tablet. Note, this option requires an Internet connection and/or cellular data service.
  • Passcode (Duo Mobile app required): Tap the green key button associated with the University of Chicago entry in the Duo Mobile app on your tablet, to receive a six-digit passcode. On the Duo verification screen in your web browser, select “Enter a Passcode,” type the six-digit code into the “Passcode” field, and hit “Log In.” This option will work without an Internet connection and/or cellular data service (e.g., when traveling on an airplane or internationally).

Landline Phone

Like a smartphone or mobile phone, a landline phone will work for 2FA. However, because of the stationary nature of a landline phone, if you do not intend to register another non-landline device (e.g. smartphone, mobile phone, tablet, or token), it is strongly recommended that you register more than one landline phone with the 2FA service. Registering at least two landline phones (e.g., one at home and one at the office) is better than a single landline phone located in a single location.

A landline phone has one verification option:

  • Phone call: You can choose to have Duo place an automated call to your landline phone. On the Duo verification screen in your web browser select “Call Me.” Your landline phone will ring and after answering the call, you will follow simple prompts to verify. Note, this option requires landline phone service.

Duo Token

A token is a physical device you carry with you that generates a regularly changing, one-time passcode. Note, tokens that are compatible with Duo must be purchased for a fee of $30 – $60. To learn more about tokens and make a purchase, visit the ID & Privileges Office at the Joseph Regenstein Library.

A token has one verification option:

  • Passcode: Access the token to receive a six-digit passcode. On the Duo verification screen in your web browser, select “Enter a Passcode,” type the six-digit code into the “Passcode” field, and hit “Log In.” This option will work without an Internet connection and/or cellular data service (e.g., when traveling on an airplane or internationally).