Cornell has implemented Duo’s Verified Push for university faculty and employees.Verified Push was piloted by CIT staff and IT Service Group directors. It has also been in use at Weill Cornell Medicine and other major institutions with no adverse impact, becoming the new minimum standard for…

By now you’re quite familiar with the two-chime notification of Two-Step Login, that extra security step that helps protect your NetID. Log in to a service, “ba-ding!” grab your phone, push the green button and away you go. But sometimes you reach for your phone, and it’s still on the counter at…

Duo, Cornell’s vendor for providing Two-Step Login, has introduced a feature called Muted Push, designed to help prevent “mobile push harassment” attacks.

Starting Sunday, March 12, 2023, Cornell's Manage Your Two-Step Login website will update to the new Duo Device Management Portal for managing enrolled devices.

Beginning Sunday, February 19, 2023, Office 365 accounts that have already been migrated to Microsoft Azure sign-in will also begin using the Duo Universal Prompt for Two-Step Login authentication.

In February 2023, Cornell will be updating the look and feel of the Duo prompt used by Two-Step Login. This update will make authenticating your Cornell sign-ins more secure, streamlined, and accessible.

Beginning in December, Cornell will discontinue a Two-Step Login (Duo) authentication method—the Duo Mobile App passcode feature. As you may be aware, Duo Mobile App passcodes are number codes generated within the mobile app and then entered into the Duo prompt to authenticate your Cornell sign-in.

Duo, the vendor for Two-Step Login, will launch a new user interface (UI) for its iOS and Android mobile apps in mid-October. This change will make it easier for you to enroll, authenticate, and troubleshoot Two-Step Login. Watch the new Duo Mobile App Video, read more about Duo's changes, or see…

If you're not already using Duo Mobile for Two-Step Login, it's easy to set up for secure, convenient access wherever you are. Make your Two-Step Login experience simple and seamless with Duo Push, supported by the Duo Mobile app. Quickly verify your login by approving push notifications on your…

Effective June 4, 2019, Two-Step Login now supports using your security key, or U2F token, with Firefox as well as Chrome. After this date, the first time you log in using your security key, you will be prompted to update the key. Simply click Continue at the prompt. Once the security key…

During late 2024, Cornell will begin rolling out Duo Verified Push for logins using the Duo Push method. Affected campus populations will be notified by direct email about this change. 

To use Cornell's Virtual Private Network (VPN) with campus networks and services, you must use Cisco Secure Client VPN software. See the How to Install Cisco VPN Software page for instructions.

To use Cornell's Virtual Private Network (VPN) with campus networks and services, you must use Cisco Secure Client VPN software. See How to Install Cisco VPN Software for instructions.

To use Cornell's Virtual Private Network (VPN) with campus networks and services, you must use Cisco Secure Client VPN software. See the How to Install Cisco VPN Software page for instructions.

About the Universal Prompt With the new Duo Universal Prompt, you can expect a new, streamlined authentication experience.

Your Location and Privacy The Duo mobile app does not track your exact location. It only records broad geographic data for the city or country where the login originated, such as "Ithaca, NY, US." Duo only records a location at the time of the login attempt. It does not continuously track anyone'…

Google no longer supports the U2F authentication standard in Chrome. This technology was previously used for USB security keys (hardware tokens), such as those used with Cornell Two-Step Login. To accommodate this change, Duo, the vendor that supports the Two-Step Login service, in January 2022…

On Wednesday, June 5, 2024, Cisco AnyConnect VPN (also known as CUVPN) will be updated. Cisco is making a name and icon change that could cause confusion. Learn more about the key differences and what to expect. Two-Step Login is required for all users to authenticate to the CU VPN.