Two-Step Login Articles
-
About
-
Benefits of increased security through Cornell's Two-Step Login service
-
How and when the Duo Mobile App uses your location data
-
Your use of Cornell Two-Step Login must adhere to all University Policy that pertains to individual responsibility for safeguarding access to campus IT services and assets. Related...
Admins: Add Two-Step Login to Your Online Service
-
For Administrators: If your service authenticates with CUWebLogin (CUWL), you can easily add Two-Step Login. Otherwise, you may be able to integrate two-factor authentication using a Duo Application.
-
For Administrators: How to add Two-Step Login to your online service using a Duo Application
-
For Administrators: How to add Two-Step Login for logging in to servers and workstations
Common Tasks
-
Confirm that your Two-Step Login account is ready to use.
-
Use Two-Step Login with more sites
-
How to use Remember me for 24 Hours to reduce the number of times Two-Step Login prompts you to authenticate
-
How to use Two-Step login when outside the United States
-
When you are going to be without Wi-Fi or cellular service, you can: Use Duo Mobile on your smartphone or tablet to generate a one-time passcode, or Use a hardware token to...
-
If you get a request you weren't expecting, don't accept it.
Get Started
-
How to set up Two-Step Login for the first time
-
Compare the types of devices you can use for Two-Step Login authentication
-
Detailed instructions about how to set up Two-Step Login. For a shorter version of these instructions, see Get Started with Two-Step Login.
Get Support
-
Get help using two-step login or review documentation
Log In
-
How to use Duo Push, a phone call, or a USB security key with Two-Step Login, plus “Remember me for 24 hours.”
-
How to use a phone call to authenticate with Two-Step Login
-
How to use a security key, inserted in a USB port, to authenticate with Two-Step Login
-
How to use the Duo Push app to authenticate with Two-Step Login. This also includes information about your location privacy. Duo only records a general location at the time of the login attempt.
-
How to use MacOS Touch ID with Two-Step Login
-
How to use a passcode to authenticate with Two-Step Login
-
How to use append mode or a second password to authenticate with Two-Step Login for services that don't support CUWebLogin
-
Fraudulent emails (see how to spot them) are a common way to steal Cornell NetIDs and passwords, and gain access to your private information. Even with two-factor authentication enabled, criminals have found ways to trick users into giving away their login credentials.
-
How to use Remember me for 24 Hours to reduce the number of times Two-Step Login prompts you to authenticate
-
If you get a request you weren't expecting, don't accept it.
Manage Devices
-
How to configure your Two-Step Login devices and add new ones
-
How to add a new device (smartphone, tablet, landline, cell phone, hardware token, or U2F token) to authenticate with Two-Step Login
-
How to set meaningful names for your Two-Step Login devices
-
Confirm that your Two-Step Login account is ready to use.
-
How to set up and use hardware tokens with Two-Step Login
-
How to remove a device from you list of enrolled devices in Two-Step Login
-
How to replace the smartphone you have listed in Two-Step Login using a new phone with the same phone number or a different phone number.
-
How to set your default device and select automatic authentication for Two-Step Login
Office 365
-
How It Works Whether Two-Step Login has been mandated for your Office 365 account or you are choosing to opt in, it protects access to your email, calendar, and all other Office 365 services...
-
How to opt in to use Two-Step Login with Office 365.
-
Can I Use Two-Step Login for Office 365 on the Web Only? No. Limiting Two-Step Login to Office 365 on the web would allow an attacker to bypass Two-Step Login's extra...
-
How to update your cornell.edu account profile so you can use Two-Step Login for Office 365 with Apple's iOS Mail and Calendar apps on your phone or tablet.
-
How often Office 365 will prompt you to authenticate on Office 365 applications or Outlook on the Web.
-
I am required to use Two-Step Login when I log in to a campus service with CUWebLogin. Will this requirement extend to Office 365 as well?
-
User Experience If you use the macOS Contacts app, you may not be able to sync your contacts after opting in to Two-Step Login for Office 365. What to Do Select System...
-
Frequently Asked Questions (FAQ) about Two-Step Login for Office 365
-
User Experience Office 365 is not prompting me for Two-Step Login, even though I opted in. Explanation Except when you are using Outlook on the Web (outlook.cornell.edu),...
-
How can I tell whether opting in to Two-Step Login for Office 365 worked?
-
Why is the prompt for the second step of logging in to Office 365 different from what I usually see? When there is not enough room on the page to display the regular prompt, Two-Step Login...
Troubleshooting
-
Common troubleshooting tips for Two-Step Login problems, including a disabled account, time away from the university, blocked connections to Duo Security, and conflicts with Dragon NaturallySpeaking.
-
What to do if your device is lost or stolen
-
How to use Remember me for 24 Hours if third-party cookies are blocked by your browser
-
How to update your cornell.edu account profile so you can use Two-Step Login for Office 365 with Apple's iOS Mail and Calendar apps on your phone or tablet.
-
What to do if you see the following warning, "Adding an Exchange account will allow the Exchange administrator to remotely manage your device. The administrator may collect personal data, add/remove accounts and restrictions, list, install, and manage apps, and remotely erase data on your device."
-
What to do if your Two-Step Login account is locked
-
How to use Two-Step Login if you don't have access to any of your enrolled devices or passcodes
-
Troubleshooting common problems with a Two-Step Login hardware token
-
Instructions to access your account if it was disabled.
-
User Experience If you use the macOS Contacts app, you may not be able to sync your contacts after opting in to Two-Step Login for Office 365. What to Do Select System...
-
What to do if your Two-Step Login USB security key does not work in the Firefox browser.
-
Why is my U2F (USB) Security Key prompting me to update? What to do if that happens.
-
User Experience Office 365 is not prompting me for Two-Step Login, even though I opted in. Explanation Except when you are using Outlook on the Web (outlook.cornell.edu),...
-
User Experience The Remember me for 24 Hours checkbox does not work with Safari 13.0.4 and up on devices running macOS Mojave 10.14. Solution There are two options...
-
How to replace the smartphone you have listed in Two-Step Login using a new phone with the same phone number or a different phone number.
-
Beginning in mid-January 2022, Two-Step Login users who authenticate using a USB security key (hardware token) will need to update their key and should expect an extra step in their login process.
-
Why is the prompt for the second step of logging in to Office 365 different from what I usually see? When there is not enough room on the page to display the regular prompt, Two-Step Login...
-
The Expand Where You Use Two-Step Login tab does not show and the Opt Out button is not available.
-
Two-Step Login is not compatible with KProxy. Instructions to use WebDAV instead.
-