Two-Factor Authentication

Two-Step Login adds an extra layer of security to your Cornell NetID and password by requiring:

• something you know (your NetID and your password), plus
• something you have (a physical device, like your phone)

This is called two-factor authentication, and it's required for access to certain university services, such as Workday, Student Center, and Student Essentials. Duo Security provides the technology behind Two-Step Login.

Two-Step Login makes it much more difficult for intruders to use your identity to access campus services. Even if your password has been stolen, the second step to the login process will prevent someone from logging in.

For certain university services and information, typically ones that grant access to sensitive information, you will be required to use Two-Step Login. You can also choose to expand where you use Two-Step Login to better protect your NetID password.

Key Features

• Decrease your risk of account compromises and identity theft, along with the consequences of lost time, money, and privacy
• Get alerted if your password is stolen or guessed as soon as someone tries to log in
• Use your smartphone, cell phone, tablet, or landline phone to confirm your login requests 
• Choose to let Two-Step Login remember you for 24 hours (for most login requests)
• Expand where you use Two-Step Login to better protect your NetID password

Who Can Use Two-Step Login

Two-Step Login accounts are available to all current students, faculty, staff, alumni, retirees, and affiliates, as well as people who have a Sponsored NetID.

People who have GuestIDs are not eligible for Two-Step Login.

----------