WashU 2-Factor Authentication (2FA) with Duo
What is Duo?
Duo is a form of multifactor authentication that uses a mobile device or phone to verify that the person logging into your account is actually you. Duo adds a second layer of defense against unauthorized logins to your WUSTL account and email.
Why is Washington University using Duo?
Duo protects access to your WUSTL accounts and email, even if your password is guessed or stolen. Universities are prime targets for Internet thieves attempting to gain quick access to personal information and use compromised accounts to attack other businesses and institutions. Many other businesses and universities employ 2FA to enhance security and decrease instances of phishing attacks.
Do I need to use Duo?
Anyone who accesses any Washington University system online, including faculty, staff, students, alumni and volunteers, will need to enroll in Duo to log in.
You will be asked to verify your identity through Duo once every two weeks, or whenever you clear your web browser history.
By enrolling in 2FA, you are taking an important additional step toward securing your online identity and personal information. You are also helping to protect Washington University’s institutional data.
If you do not wish to install the Duo app, you can set up 2FA by entering a phone number. You will receive a phone call when you attempt to log in; press any key to authorize your login.
What if I already use Duo for another purpose?
The Duo app lets you register multiple profiles. Open the Duo app and click the + at the top of the page to add Washington University as a new account.
If you do not use the Duo app, follow the instructions to enroll your phone number without downloading the app below.
Do I have to give Duo Mobile access to my camera if I download the app onto my device?
The Duo app uses the device’s camera to take a photo of a QR code in order to quickly personalize your access for security purposes. You can deny this permission, but without this access you will have to type a long, alphanumeric “2FA secret” key to get your account working.
This article describes how to turn off permissions you may have granted the Duo Mobile application.