Skip to main content

Two-Step Login Setup Guide

Detailed instructions about how to set up Two-Step Login.  For a shorter version of these instructions, see Get Started with Two-Step Login.

This article applies to: Two-Step Login


This page will guide you through steps for setting up your devices in Two-Step Login.

 You can:

  • Enroll a phone (either smartphone, cell phone, or landline) or tablet.
  • Install the Duo app on a smartphone or tablet.
  • Enroll a hardware token, a small device you carry on your keychain. You can purchase hardware tokens online or in person at The Cornell Store.
  • Enroll a Security Key, a USB based key that only works with Chrome or Firefox.  You can purchase a security key online.
  • Enroll Touch ID, to use a fingerprint reader with MacOS and Chrome. Learn more about Using Apple Touch ID with Duo.

Set Up Devices

  1. Sign in at Manage Your Two-Step Login with your NetID and password.
  2. Select Start Enrolling Devices Now.
    Manage Your Two-Step Login screen with Start Enrolling Devices Now selected

    OR, for a Hardware Token, select the Enroll a Hardware Token tab and skip to the hardware token section of Step 5.
    Enroll a Hardware token tab selected
     
  3. Select Start setup.
    Start setup selected
  4. Select the type of device you would like to enroll, then click Continue.
    Two-Step Prompt showing device types with Continue selected.
  5. Choose from the steps below based on the type of device you are enrolling:
  • If you selected phone:
    1. Enter your phone number.
    2. Enter your extension, if needed.
    3. Check the box to confirm your number is correct.
    4. Select Continue.
      Phone entry form with phone number and extension entered, phone number verification box checked, and continue selected
       
  • If you selected tablet, you won’t be asked to enter a number.
     
  • If you selected security key, insert your key in a USB port on your computer. When prompted, touch the flashing key icon on the UF2 security key.
     
  • If you selected Touch ID:
    1. Make sure that you're not blocking pop-up windows for the enrollment site.
    2. Place your finger on the Touch ID sensor, when prompted.
    3. Select Allow, if asked to let Duo to use information about Touch ID.
  • If you selected hardware token:
    1. Enter the serial number on the back of your token, above the barcode.
    2. Select Submit.
Steps 6-8 show how to install the Duo Mobile App on a smartphone or tablet. For all other devices, skip to Step 9.
  1. Select your device’s operating system.
    Operating system choices
  2. Instructions specific to your device will appear. Follow the instructions to install the Duo Mobile app. After installing the app, return to the enrollment window and select I have Duo Mobile installed.
    I have the Duo Mobile app installed button selected
  3. Activate the app using the Duo Mobile app’s built-in barcode scanner on the code on your computer screen, then follow the on-screen instructions specific to your device. The Continue button is clickable after you scan the barcode successfully.
    Barcode available for scanning
    Barcode successfully scanned
  1. Add at least one backup device in case your primary device is not available. Select Add another device. You will resume the process above in Step 4.
    Add another device with link selected
     
  2. Strongly recommended: Safeguard all your personal information accessed through CUWebLogin.
    1. Select Expand Where You Use Two-Step Login.
    2. Select Opt-In.
    3. Confirm by completing the second step of logging in.
      Expand Where You Use Two-Step tab with Opt-In selected
      If you don't see the Expand Where You Use Two-Step Login tab, you are required to use Two-Step Login with any service where you log in with CUWebLogin.  For more information about this additional security measure, please see Expansion of Two-Step Login for Nonacademic Employees.
Give your devices meaningful names so you can keep them straight later.
  1. While in Manage Your Two-Step Devices, select Device Options.
  2. Select Change Device Name.
  3. Enter a name such as Mobile Phone, Desk Phone, or Home Phone.
  4. Select Save.

Test Two-Step Login

After you have enrolled your devices, test Two-Step Login to confirm that it works.

  1. Select the Your Two-Step Login Devices tab.
  2. Select Manage Devices. This will open the Two-Step Login Authentication Prompt.
  3. Two-Step Login will prompt you to confirm using a push, phone call, or passcode.

For more information about this service go to Two-Step Login.

Need help? Contact the IT Service Desk at itservicedesk@cornell.edu or (607) 255-5500.

This guide was adapted from the “Enrollment Guide” on the website “Duo Guide to Two Factor Authentication,” by Duo Security, Inc. [US], March 29, 2017.

About this Article

Last updated: 

Wednesday, June 19, 2019 - 2:05pm

Was this page helpful?

Your feedback helps improve the site.

Comments?