Two-Step Login blocks criminals from using stolen Cornell passwords by requiring something they don’t have. Something in your possession.
When it’s time to sign in using Two-Step Login, you confirm your identity by:
Taking an automated call on any phone you choose
Tapping an app or notification on a smartphone
Entering a code from a device on your keychain or a phone app
Tapping the button on a USB device (U2F token)
Two-Step Login adds an extra layer of security for your Cornell NetID and password by requiring:
- something you know (your NetID and your password), plus
- something you have (a physical device, like your phone)
This is called two-factor authentication, and it's required for access to certain university services, such as Workday. Duo Security provides the technology behind Two-Step Login.
Two-Step Login makes it much more difficult for intruders to use your identity to access campus services. Even if your password has been stolen, the second step to the login process will prevent someone from logging in.
For certain university services and information, typically ones that grant access to sensitive information, you will be required to use Two-Step Login. You can also choose to expand where you use Two-Step Login to better protect your NetID password.
- Decrease your risk of account compromises and identity theft, along with the consequences of lost time, money, and privacy
- Get alerted if your password is stolen or guessed as soon as someone tries to log in
- Use your smartphone, cell phone, tablet, or landline phone to confirm your login requests
- Choose to let Two-Step Login remember you for 24 hours (for most login requests)
- Expand where you use Two-Step Login to better protect your NetID password
Who Can Use Two-Step Login
Two-Step Login accounts are available to all current students, faculty, staff, retirees, and affiliates, as well as people who have a Sponsored NetID.
Alumni and people who have GuestIDs are not eligible for Two-Step Login.
Extra security for your Cornell NetID password
Not applicable or information not available.
The NetID is the unique electronic identifier, in which the password permits secure access to non-public Cornell resources and information.