Why Two-Step Login?

1. NetID passwords belonging to Cornell community members are stolen, guessed, or hacked daily. Two-Step Login means a thief would also need to have your device in order to do anything with your password.

2. Typically, by the time a password theft is detected or reported, damage has already been done. With Two-Step Login, you're alerted the first time someone tries to log in.

3. People whose passwords get stolen lose time and productivity. The university's security investigations and process to reset a NetID password take time to complete.

4. When someone gains access to your accounts through a stolen password, your risk of identity theft increases dramatically.

5. Depending on what access you have to Cornell's systems, your stolen password could expose sensitive or confidential information. At risk are hundreds or thousands of members of the Cornell community, and costs to the university of millions of dollars.

Get Started with Two-Step Login

How Two-Step Login Helps You Detect Password Theft

1. When your password is used to log in to Cornell services that use Two-Step Login, you'll get notified through the method that was selected in the Two-Step Login authentication prompt.
2. If you weren't the one logging in, click Deny.
3. Duo will ask Was this a suspicious login? If so, click Yes.
4. Two-Step Login will send an alert to the Cornell IT Security Office.