Information technology tools and resources at the UW
Two-factor authentication (2FA)
What is 2FA?
Two-factor authentication adds a layer of security when you sign in with your UW NetID. With 2FA, first you enter your password, then use a 2FA device to prove it’s really you.
When do I sign in with 2FA?
You’ll be asked to sign in with 2FA only when a system requires it. Many systems with sensitive data require 2FA, including UW administrative systems, Hyak, and others.
Why do I need 2FA?
2FA prevents others from signing in as you, even if they know your password. It protects you and the UW from the risks of phishing scams and other forms of passwords theft.
Duo introduced in April
Duo was introduced in April as the new solution for 2FA. All employees, and students in approved programs, can use Duo for 2FA. People still using Entrust tokens will migrate to Duo over summer. Refer to migration from Entrust to Duo to learn more.
Workday will require 2FA – enroll before go-live
Workday will require 2FA when it goes live on June 27. All employees are encouraged to enroll in 2FA to be ready.
Manage your device(s)
To get started, first choose what device(s) you’ll use for 2FA.
- Set up a smartphone or tablet – recommended
- Set up a mobile phone or landline
- Set up a U2F device
- Request a hardware token
We recommend using Duo Mobile on your smartphone because it’s free, secure, and simple to use. Duo Mobile creates no data on your phone.
The following table describes each type of 2FA device and its options for signing in.
|Device Type||Sign-in Options||Notes|
|Smartphone or Tablet (Recommended)
|Mobile Phone or Landline
Sign in with 2FA
Once you set up your device(s), you’ll be ready to sign in with 2FA.
Sign-in options depend on your choice of device (above). They include:
- “Send Me a Push” – Duo sends a notification to Duo Mobile on your smartphone or tablet. You then tap “Approve” to sign in. An internet connection (Wi-Fi or cellular data) is required to receive push notifications.
- “Call Me” – Duo calls your smartphone, mobile phone, or landline. Answer the call and follow the instructions to approve.
- “Enter a Passcode” – Open Duo Mobile on your smartphone or tablet to generate a passcode, with or without an internet connection. Or, if you have a hardware token, use the passcode from it.
To learn more about the steps, review how to sign in with 2FA.