Skip to main content

Two-Step Login

New Users: Get Started with Two-Step Login

Duo's Updated Universal Prompt

In February 2023, Cornell updated the look and feel of the Duo prompt used for Two-Step Login. These changes make authenticating sign-ins more secure, streamlined, and accessible. For details about what changed and a comparison of Duo’s Traditional versus Universal Prompts, visit The Duo Universal Prompt: A New Look for Two-Step Login.

Update: Beginning February 19, 2023, the Duo Universal Prompt will be used to authenticate Microsoft Azure sign-ins to Office 365. Currently, Office 365 accounts are being migrated from ADFS to Microsoft Azure sign-in. Users will see the Duo traditional prompt before their account is migrated, then the Duo Universal Prompt afterward.

Two-Factor Authentication

Two-Step Login adds an extra layer of security to your Cornell NetID and password by requiring:

  • something you know (your NetID and your password), plus
  • something you have (a physical device, like your phone)

Illustration of three steps in using Duo for authentication -- Login using Cornell sign-on page, Proof by approving with the Duo mobile app, and Access to the requested web service

This is called two-factor authentication, and it's required for access to many university services, such as Workday, Student Center, and Student Essentials. Duo Security provides the technology behind Two-Step Login.

Two-Step Login makes it much more difficult for intruders to use your identity to access campus services. Even if your password has been stolen, the second step to the login process will prevent someone from logging in.

For many university services and information, particularly those that grant access to sensitive information, you will be required to use Two-Step Login.

Key Features

  • Decrease your risk of account compromises and identity theft, along with the consequences of lost time, money, and privacy
  • Use your smartphone, cell phone, tablet, landline phone, or USB security key to confirm your login requests
  • Get alerted if your password is stolen or guessed as soon as someone tries to log in
  • Choose to let Two-Step Login trust your browser for 24 hours (for most login requests)

Who Can Use Two-Step Login

Two-Step Login accounts are available to all current students, faculty, staff, alumni, retirees, and affiliates, as well as people who have a Sponsored NetID.

People who have GuestIDs are not eligible for Two-Step Login.


Manage Your Two-Step Login (link takes you to the website)
  • Where you go to start using Two-Step Login
  • Where you go to update your devices and preferences

Get Started with Two-Step Login

Duo User Guide (updated to reflect the Universal Prompt version)

Service Details

Extra security for your Cornell NetID password


No Fee

Regulated Data:

Not applicable or information not available.

Support Contact:

Compare to:

1 NetIDs

The NetID is a unique electronic identifier in which the password permits secure access to non-public Cornell resources and information.


Two-Step LoginNetIDsCUWebLogin
IT Professionals:

Was this page helpful?

Your feedback helps improve the site.