You Will Need to Know Your NetID and Password

Look at the bottom of the email you received for your NetID. 

If you have never used this NetID before, Cornell's NetID self-service website will help you activate your NetID and set up your personal password.

If you don’t remember your password, use this information to reset it. 

First Download the App or Get a Hardware Token

Cornell uses the Duo mobile application for two-step authentication. Duo offers two options for alumni to verify their identity when logging into Cornell services; through a smartphone app or through a hardware token.

I have a smartphone

This will give you the easiest login experience. Before you activate two-step login, download the Duo app from your phone’s app store.

I don’t have a smartphone

Instead of a smartphone you can use a hardware token. You will need to purchase a token through the Cornell Store. Hardware tokens are programmed to Cornell specifically and are not available for purchase elsewhere.

Set up Two-Step Login for a Smartphone

1. Go to Manage Your Two-Step Login.

2. Log in with your NetID and Password.

   If you don’t remember your password, use this information to reset it. Be aware that Cornell now requires 16-character passwords due to the increasing attacks on NetIDs. Use a passphrase to create a memorable (and long) password.
3. Select Start Enrolling Devices Now. (If you would like to enroll a hardware token, see the next set of instructions.)
4. At the Duo welcome screen, click Next.
5. Duo will provide additional information about online security on the next couple of screens. Read this important information and click Next to advance at each screen.
6. When you reach the Select an option screen, select Duo Mobile.
7. Duo will guide you through the setup process.  

Full details on the process can be found in the Two-Step Login Setup Guide.

Set up Two-Step Login for a Hardware Token

To enroll a hardware token:

1. Open the Manage Your Two-Step Login site.
2. Select the Enroll a Hardware Token tab near the top of the window.
3. When prompted, enter your token's serial number exactly as it is printed. You'll find the serial number on the back of your token above the barcode.
4. Click Submit.

After successfully enrolling a token:

• You will see it listed in the Other Options to Log In list in the Duo authentication prompt and in your Duo device management list.
• On the Duo device management screen, the only change you can make is to delete the token from your account. You cannot give it a different name. 

Add A Backup Device

After you finish enrolling your first device, you'll be able to use Duo and log in to Cornell systems. What happens if you forget your phone at home, and you need to log in?

Adding a second device is strongly recommended in case the device you usually use is unavailable, lost, or stolen. Your additional method can be a USB security key, hardware token, Touch ID, or Windows Hello.

Follow these instructions to set up a second option.

Continue Using Two-Step Login

• Learn how to log In using the device you chose
• Enroll additional devices as a backup for your main device
• Reduce how often you need to authenticate by selecting Trust browser when you log in.    

Additional Resources

• More about hardware tokens
• Detailed Duo setup guide
• Set a recovery email address in case you forget your password