Content (566)
We strongly recommend that you work with your Cornell Google Workspace email using Google's web interface at gsuite.cornell.edu. Using Apple Mail is not as good.However, if you choose to view your messages through Apple Mail, see below.
Yes. The Remember me option uses "first-party" browser cookies, which are not typically blocked. (This option is labeled Trust Browser for CU VPN and other non-website logins that do not support Verified Push.)For more about using Duo Push, visit Login Using Duo Push for Two-Step Login.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
When you get a new smartphone, there are a few steps you need to take to set up the phone you're using for your Two-Step Login account. The exact steps depend on whether you kept your phone number or if you have a new number on your new smartphone.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
Log Into the Device Management PortalTo add a device, you need to access the management portal.
Use Append Mode Authentication
Some campus IT services, such as Desktop Everywhere using the VMware Horizon View client, do not support a web interface to specify how to complete the second step of authentication.
If you enter just your NetID and password with these non-web apps, Two-Step…
Get a Passcode from a Hardware TokenAcquire and enroll a hardware token that will display a passcode with a simple button push.
During late Fall 2025 and early Spring 2026, Cornell will begin disabling the Duo Phone Call and Duo SMS Passcode methods.
During Fall 2025 and Spring 2026, Cornell is retiring the Duo Phone Call and
You can grant others permission to see your calendar. You choose the level of detail (when you’re free or busy, the subject of the event, or the details of the event). You also have the option of marking a calendar item as Private; this removes all privileges except seeing that you are busy for the…
I'm trying to use a hardware token but no passcode appears when I press the token's button.Solution: Either the battery is dead or the token is damaged. You will need to replace the token.
You can use Two-Step Login when you travel internationally to countries, other than those listed below. Even if there is no cell or data service available for your smartphone, you can still use a hardware token to generate a passcode.
Do you need to unlock your Duo account after too many failed login attempts? Use Cornell's self-service website to re-activate Duo Mobile. If Two-Step Login displays the message Account Disabled when you try to log in, use Cornell's self-service website to re-activate your Duo
The IT Service Desk can issue an emergency bypass code that will allow you to log in up to ten times over the next twenty-four hours. To obtain the emergency bypass code, you must verify your identity with the IT Service Desk. This means that you will need an official id handy…
Remove the missing device immediately from Manage Your Two-Step Login using another device that you have enrolled. For details, follow the steps at Remove a Device from Two-Step Login.
Skype for Business has been replaced by Microsoft Teams.
By default, Skype will start automatically when Windows starts. You can change this setting.
You will not be able to enable FileVault on a computer that is managed by Cornell IT staff, because encryption will already be setup. If you are not sure whether your computer is managed, please contact your support provider.
To enable FileVault on a non-managed Mac computer,…
Two-Step Login blocks criminals from using stolen Cornell passwords by requiring something they don’t have. Something in your possession.When it’s time to sign in using Two-Step Login, you confirm your identity by:
The following goals have been defined for these key areas of Cornell's Identity and Access Management program.