Skip to main content

Two-Step Login

What Is Two-Step Login and Two-Factor Authentication

Two-Step Login adds an extra layer of security to your Cornell NetID and password by requiring:

  • something you know (your NetID and your password), plus
  • something you have (a physical device, like your phone)

Illustration of three steps in using Duo for authentication -- Login using Cornell sign-on page, Proof by approving with the Duo mobile app, and Access to the requested web service

This is called two-factor authentication, and it's required for access to many university services, such as Workday, Student Center, and Student Essentials. Duo Security provides the technology behind Two-Step Login.

Two-Step Login makes it much more difficult for intruders to use your identity to access campus services. Even if your password has been stolen, the second step to the login process will prevent someone from logging in.

For many university services and information, particularly those that grant access to sensitive information, you will be required to use Two-Step Login.

Key Features

  • Decrease your risk of account compromises and identity theft, along with the consequences of lost time, money, and privacy
  • Use your smartphone, cell phone, tablet, landline phone, or USB security key to confirm your login requests
  • Get alerted if your password is stolen or guessed as soon as someone tries to log in
  • Choose to let Two-Step Login trust your browser for 24 hours (for most login requests)

Who Can Use Two-Step Login

Two-Step Login accounts are available to all current students, faculty, staff, alumni, retirees, and affiliates, as well as people who have a Sponsored NetID.

People who have GuestIDs are not eligible for Two-Step Login.


Manage Your Two-Step Login (link takes you to the website)
  • Where you go to start using Two-Step Login
  • Where you go to update your devices and preferences

Get Started with Two-Step Login

Duo User Guide (updated to reflect the Universal Prompt version)

Service Details

Extra security for your Cornell NetID password


No Fee

Regulated Data:

Not applicable or information not available.

Support Contact:

Compare to:

1 NetIDs

The NetID is a unique electronic identifier in which the password permits secure access to non-public Cornell resources and information.


Two-Step LoginNetIDsCUWebLogin
IT Professionals:

Was this page helpful?

Your feedback helps improve the site.