IT News & Events

News about IT at Indiana University and the world


UITS Monitor: Special edition of the Monitor

Sign up for Duo now

What is Two-Step Login with Duo?

Two-Step Login helps prevent anyone but you from logging in to your accounts, even if they have your username and passphrase.

At IU, Two-Step Login is done through a handy service called Duo. 

Why is Two-Step Login important?

Email and online scams (like phishing attacks) are becoming increasingly sophisticated. Two-Step Login adds a second layer of security, in case your passphrase is compromised.

How does it work?

Two-Step Login with Duo works like the two-step logins that many financial services require these days:

  1. Enter your username and passphrase
  2. Use your mobile device (recommended) or phone to complete your login

When you set up a device to use for two-step logins, be sure to set up a second option. That way, you have a backup in case you don’t have access to your primary device (e.g., if your phone runs out of juice).

How do I set up a second device?

Check out the list of device recommendations on IU’s Knowledge Base to figure out which ones work best for you. If you get stuck without a working device, the UITS Support Center may be able to give you a bypass code, but it can take up to 20 minutes. This could leave you in a tough spot if you need to get into your account quickly, such as for a class activity. The UITS Support Center can also give you a token at no cost if you decide that’s the right backup device for you.

How to manage your devices >>

How to use multiple usernames with one device >>

What to do if your device is stolen or lost >>

Hit up a tabling outreach event to get in-person help with Duo:

IU Bloomington tabling events >>

IUPUI tabling events >>

If you’re at one of the IU regional campuses, you can get help from your UITS Support Center.

Common misconceptions

Rumor #1: You need a smartphone. Actually, a tablet, a regular cell phone, or even a landline will do. Most people find the mobile app to be the most convenient, but you've got several options—including Google Voice, which doesn't require a separate device. 

Rumor #2: You need a Wi-Fi connection. No problem if you can't connect—the mobile app works in airplane mode, without a cell signal, and without Wi-Fi. Just tap the key icon to get a passcode.

Rumor #3: You'll have to verify your identity all the time. Only every once in a while, when you log in via a new web browser session. (If you keep your browser open, you may only need to log in once a day on each device.)

Rumor #4: It's better to wait. Signing up now means you're registered for Duo—you aren't required to use it for all CAS logins until November 2, when UITS flips the switch (automatically enabling it).

Rumor #5: This is only for undergraduates. All IU account holders are required to enable Two-Step Login with Duo by November 2. That means undergrads, graduates, IU employees, group account holders, IU affiliates—basically, anyone who logs in to IU accounts through CAS.