Tax season has begun and so have tax-related scams. Protect yourself by learning how to recognize and avoid the scams that target taxpayers.  

Go to the Device Management Portal To add a new device to Two-Step Login, begin one of two ways. Either: Go to the Device Management portal using one of the following methods. Either:

Starting November 4, 2025, Cornell will begin disabling the Duo Phone Call and Duo SMS Passcode methods. 

Go to the Device Management Portal To add a new device to Two-Step Login, begin one of two ways. Either: Go to the Device Management portal using one of the following methods. Either:

Go to the Device Management PortalGo to the Device Management portal using one of the following methods:

Use Append Mode Authentication Some campus IT services, such as Desktop Everywhere using the VMware Horizon View client, do not support a web interface to specify how to complete the second step of authentication.  If you enter just your NetID and password with these non-web apps, Two-Step…

Get a Passcode from a Hardware TokenAcquire and enroll a hardware token that will display a passcode with a simple button push.

Starting November 4, 2025, Cornell will begin disabling the Duo Phone Call and Duo SMS Passcode methods. 

Why Two-Step Login? NetID passwords belonging to Cornell community members are stolen, guessed, or hacked daily. Two-Step Login means a thief would also need to have your device in order to do anything with your password. Typically, by the time a password theft is detected or reported,…

If you don't see the Expand Where You Use Two-Step Login tab described below, then you are required to use Two-Step Login with any service where you log in with CUWebLogin and cannot opt out of this expanded use of Two-Step Login.  Expand Your Use of Two-Step Login To better protect…

About Hardware TokensA hardware token is a keyfob-like device where you press a button to generate a one-time passcode for use in the second step of logging in. Hardware tokens are an option for situations where using a landline, cell phone, or other mobile device with Two-Step Login is not…

On November 4, 2025, Cornell will retire the Duo Phone Call and

To go to the Two-Step Login Device Management Portal, either:

During Fall 2025, Cornell is retiring the Duo Phone Call and

Setting Up a Duo Application Duo Security supports integration with a broad range of applications and technologies, listed on the top page of their online documentation.

(For information about what phishing is, see How to Guard Against Internet Fraud.)

User ExperienceIf you use the macOS Contacts app, you may not be able to sync your contacts after opting in to Two-Step Login for Microsoft 365.What to DoSelect System Preferences.Select iCloud.Deselect (uncheck) iCloud Keychain.Select OK.

Microsoft 365 Applications and Mobile AppsBecause Microsoft 365 uses Microsoft Azure authentication, you should rarely need to additionally authenticate with Two-Step Login when launching a Microsoft app on your computer or mobile device.