Skip to main content

Log in with a Passcode for Two-Step Login

How to use a passcode to authenticate with Two-Step Login

This article applies to: Two-Step Login


Cornell has disabled Duo Mobile App Passcodes as an authentication method. Use one of the remaining authentication methods going forward. For details visit Log In Using Two-Step Login.

Get a Passcode from a Hardware Token

Acquire and enroll a hardware token that will display a passcode with a simple button push.

If you encounter a problem using a hardware token to log in, see some possible causes and solutions.

If the token generates anything other than a passcode, it is considered defective. While Duo's policy is to replace a defective token for up to six months after purchase, unfortunately, since the Cornell Store purchases tokens in bulk, by the time a user purchases a token from them, the warranty has expired. The only solution for a defective token purchased from the Cornell Store is to buy a new one or ask your department to replace the token.

For more information, see Duo Security's Guide to Two-Factor Authentication.

Log in with a Hardware Token Passcode

If your most recent Two-Step Login authentication used your hardware token, or if you have selected Hardware token from the Other options to log in list, then the Duo prompt will show the Enter your passcode screen. Then:

  1. Generate a passcode using your hardware token.
  2. Enter the passcode on the Duo prompt as indicated.


     
  3. Click Verify.

Get an SMS Passcode via Text Message

To generate passcodes ahead of time, go to Two-Step Login, then select the Manage Devices button. This will take you to the Two-Step Login authentication prompt. You will need a device enrolled that can accept text messages. If needed, you can add a new device from this screen before you get your passcodes using the steps below: 

  1. From Two-Step Login's Duo prompt, click Other options, then select Send text message passcode.
  2. You will receive a text message with a passcode on the text-capable phone you have set up with Two-Step Login.
  3. The Duo prompt will show the Enter your passcode screen. Enter the passcode you received by text on the prompt as indicated.


     
  4. Click Verify.
  5. If you need to have the passcode sent again, click Send a new passcode and look for the new passcode on your phone. If you need to use a different authentication method, click Other options and select a method from the list.
A new passcode will invalidate any old passcodes. Recommended: Delete all old text messages containing passcodes when a new one comes in.

Was this page helpful?

Your feedback helps improve the site.

Comments?