Skip to main content

Cornell University

Get Started with Two-Step Login: Quick Guide

Streamlined guide on how to set up Two-Step Login for the first time

This article applies to: Two-Step Login

First Time Setup for Two-Step Login

Optional: view Cornell's detailed Two-Step Login Setup Guide
  1. Create your account by signing in at Manage Your Two-Step Login.
  2. Log in with your NetID and Password.
  3. Select Start Enrolling Devices Now. If you would like to enroll a hardware token, click the Enroll a Hardware Token tab and follow the instructions on that screen instead of continuing here. For more information about hardware tokens, visit Hardware Tokens for Two-Step Login.


    Manage Your Two-Step Login webpage showing button titled Start Enrolling Devices Now

     
  4. At the Duo welcome screen, click Next. ("Duo" is the name of the IT security service supporting the Two-Step Login service.)



     
  5. Duo will provide additional information about online security on the next couple of screens. Read this important information and click Next to advance at each screen.

  6. When you reach the Select an option screen, select Duo Mobile.

    For first-time setup, use the Duo Mobile app with Cornell’s Two-Step Login. Otherwise, you could end up unable to log in to Cornell services.
    Duo Mobile is the only selection when first enrolling
  7. Duo will guide you through the setup process.  

Full details on the process can be found in the Two-Step Login Setup Guide.

Add A Backup Device

After you finish enrolling your first device, you'll be able to use Duo and log in to Cornell systems. What happens if you forget your phone at home, and you need to log in?

Adding a second device is strongly recommended in case the device you usually use is unavailable, lost, or stolen. Your additional method can be a USB security key, hardware token, Touch ID, or Windows Hello.

Follow these instructions to set up a second option.

Continue Using Two-Step Login

Duo Universal Prompt showing authentication method, device sent to, Other options link, and Trust browser checkbox  

Cornell employees (faculty and staff) can add even more security by switching to a passkey with Secure Connect. With this method, you won’t need to submit your NetID and password, or use Duo, to log in to most Cornell services. Take five minutes and set yourself up with one-touch login.

If you switch to Secure Connect, keep in mind that Duo Mobile Push, USB security key, or hardware token methods must still be available as a backup, even if you use Secure Connect regularly.

Support Contact:

Cornell IT Service Desk

Normal Business Hours: Monday-Friday, 8am-6pm (Eastern Time)
Open a ticket (24x7 support)
Emergency Service Disruptions: After Hours Support

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.