Content (20)
When this change was rolled out, people were prompted to authenticate with the Microsoft Authenticator instead of Duo as originally communicated. CIT security has rolled back the change to resolve the issue.
Thanks to technology, your personal and financial information are accessible to you from anywhere that the internet is available. This is convenient, but it also comes with risk. If all you need to access your account is “hello123,” then it will be easy for anyone else with an interest in your…
If you're not already using Duo Mobile for Two-Step Login, it's easy to set up for secure, convenient access wherever you are. Make your Two-Step Login experience simple and seamless with Duo Push, supported by the Duo Mobile app. Quickly verify your login by approving push notifications on your…
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
When you get a new smartphone, there are a few steps you need to take to set up the phone you're using for your Two-Step Login account. The exact steps depend on whether you kept your phone number or if you have a new number on your new smartphone.
Go to the Device Management Portal
To add a new device to Two-Step Login, begin one of two ways. Either:
Go to the Device Management portal using one of the following methods. Either:
Log Into the Device Management PortalTo add a device, you need to access the management portal.
Use Append Mode Authentication
Some campus IT services, such as Desktop Everywhere using the VMware Horizon View client, do not support a web interface to specify how to complete the second step of authentication.
If you enter just your NetID and password with these non-web apps, Two-Step…
Get a Passcode from a Hardware TokenAcquire and enroll a hardware token that will display a passcode with a simple button push.
During late Fall 2025 and early Spring 2026, Cornell will begin disabling the Duo Phone Call and Duo SMS Passcode methods.
Why Two-Step Login?
NetID passwords belonging to Cornell community members are stolen, guessed, or hacked daily. Two-Step Login means a thief would also need to have your device in order to do anything with your password.
Typically, by the time a password theft is detected or reported,…
If you don't see the Expand Where You Use Two-Step Login tab described below, then you are required to use Two-Step Login with any service where you log in with CUWebLogin and cannot opt out of this expanded use of Two-Step Login.
Expand Your Use of Two-Step Login
To better protect…
About Hardware TokensA hardware token is a keyfob-like device where you press a button to generate a one-time passcode for use in the second step of logging in. Hardware tokens are an option for situations where using a landline, cell phone, or other mobile device with Two-Step Login is not…
First Time Setup for Two-Step LoginOptional: view Cornell's detailed Two-Step Login Setup Guide. Create your account by signing in at
To go to the Two-Step Login Device Management Portal, either:
During Fall 2025, Cornell is retiring the Duo Phone Call and
Setting Up a Duo Application
Duo Security supports integration with a broad range of applications and technologies, listed on the top page of their online documentation.
User ExperienceIf you use the macOS Contacts app, you may not be able to sync your contacts after opting in to Two-Step Login for Microsoft 365.What to DoSelect System Preferences.Select iCloud.Deselect (uncheck) iCloud Keychain.Select OK.
On Tuesday, April 28, CIT will implement an updated, more secure version of Duo multi-factor authentication (MFA) for Microsoft applications on desktop and the web.
On Tuesday, April 28, CIT planned to implement an updated, more secure version of Duo multi-factor authentication (MFA) for Microsoft applications on desktop and the web. This change will be re-implemented at a later date.