Duo Two-Factor Authentication

Duo security logoBrandeis has enabled two-factor authentication using the Duo service. Two-factor authentication serves as an extra layer of security designed to prevent unauthorized access to your account and personal information. Duo protects your Brandeis account by requiring two forms of authentication to verify your identity when logging into Brandeis services:

New Users

Enroll in Duo            Instructions to set-up device

After you have enrolled in Duo two-factor authentication, you will need the following to log-in to Brandeis systems and services:

  1. Your Brandeis Username and Password. 
  2. A physical device you control such as a mobile phone, tablet, or landline phone to verify or authenticate your account.
 Note: It is recommended you set up 2 devices (you can remember your device for 30 days).

Existing Users

Manage  Duo Devices

Two-Factor Authentication Device Options

Device Options Authentication Methods Supported Platforms Additional Information
Mobile Phone
  • SMS text message
  • Phone call
Mobile phone with SMS text messaging capability
Smartphone
  • Duo Mobile push notification (recommended)
  • 
Duo Mobile passcode

  • Phone call
  • iOS
  • Android
  • Windows Mobile

Data plan is not required to receive mobile push notification or passcode via Duo Mobile app.

Tablet
  • Duo Mobile push notification (recommended)
  • 
Duo Mobile passcode

  • Phone call
  • iOS
  • Android
  • Windows Mobile
Data plan is not required to receive mobile push notification or passcode via Duo Mobile app.
Landline Phone call All phones
Hardware Token Passcode A "keychain" hardware token displays six-digit code  at a push of a button Tokens are available from the Technology Help Desk.

Frequently Asked Questions (FAQs)

Toggle
What is Duo two-factor authentication?

Duo protects your Brandeis account from being easily compromised due to phishing or malware by providing an extra layer of security beyond your username and password. Duo requires a second factor by validating something you have, such as a smartphone or tablet. Once you have enrolled, you will be required to use two forms of authentication to verify your identity when logging into Brandeis services: your username and password, and a physical device (such as mobile phone or tablet).

Toggle
What systems and services require Duo for login?

Once you are enrolled in Duo, you will be required to use two forms of authentication when accessing Brandeis protected systems and services which include (but not limited to):

Starting April 2019, Duo two-factor authentication will be required to access Workday.

Toggle
What if I don't have a smartphone or a data plan?

It is not necessary to have a smartphone to use Duo. Also, a data plan is not required for your device. You can use a not-so-smartphone, tablet or landline phone as your second device. Alternatively, you can request a hardware token which does not require an internet or cellular connection. Tokens are available from the Technology Help Desk.

Please refer to the Two-Step Authentication Devices table above for detailed information.

Toggle
How do I register a smartphone for Duo two-factor authentication?

See the Setting Up Duo Instructions on the Brandeis ITS website to watch a video on the enrollment process or view a detailed step-by-step guide.

Visit the Brandeis Duo Enrollment page to get started.

Toggle
How do I set Duo to prompt me for two-factor authentication only once every 30 days?

Once you are in the Duo Authentication page, click the check box at the bottom that reads Remember me for 30 days. After you have fully authenticated, your browser will not require you to do this again when you come back at a later session (within the 30 day period).

 Note: Two-step authentication is requested at least every 30 days for each computer and each browser you use to access Brandeis protected websites.

Toggle
My computer won't let me click "Remember me for 30 days" - now what?

If you are unable to select the 'Remember me for 30 days' checkbox and are prompted with a "You need to enable cookies in order to remember this device" message, you likely have the cookie settings pictured below*.

Firefox cookies setting
Follow these steps to resolve the issue:
1. In the 'Accept third-party cookies and site data' section, select 'Always' from the drop-down menu.
2. Save your changes however the browser updates (e.g., clicking 'OK', 'Save', etc.) 

* Note: screenshot is taken from Firefox. Other browsers, such as Chrome and Safari will have their settings displayed differently.

Or, if you want to keep third-party cookies blocked, enable an exception for the Duo cookies via this Duo FAQ "Can Duo's Remembered Devices feature work if third-party cookies are blocked?"

Toggle
What if I'm traveling with limited or no cellular or internet connection. How do I access my account?

If you are traveling and you have limited or no cellular service or internet connection, please review the following options:

  1. Obtain a hardware token from the Technology Help Desk before traveling.
  2. Have Duo send a list of 10 passcodes to your phone before you leave. On the Duo Authentication screen, select 'Enter a Passcode' then click 'Text me new codes'.
    Duo select enter passcodeDuo send me text codes
  3. A list of 10 passcodes will be sent to the phone number provided.
    Note: these passcodes codes are for one-time use.
  4. Enter one of the 10 codes in the field next to the 'Log In' button, then click 'Log In'.
Toggle
How do I get a hardware token?

A hardware token is a two-step authentication device that generates and displays a six-digit passcode at the push of a button. The device does not need wireless access or a data connection. Tokens are available upon request.

Contact the Technology Help Desk to request a hardware token. It will need to be activated by a Technology Help Desk staff member before leaving the Help Desk area.

Toggle
What if I lose my hardware token?

Contact the Technology Help Desk ASAP. We will replace it for you, and can assist with deactivating the lost one.

Toggle
What do I do if my hardware token stops working?

Please call or come to the Technology Help Desk as the token will need to be reset by a staff member.

Toggle
What should I do if I have a new phone or new phone number?

Contact the Technology Help Desk to deactivate your old phone number/device and register a new one for Duo.

Toggle
I use another two-factor authentication app like Google Authenticator, LastPass Authenticator, or Google 2-Step, how does this affect me?

Duo is not currently compatible with Google Authenticator or LastPass Authenticator.

If you have Google 2-Step enabled on your Brandeis account, Duo is intended as a replacement. You may use both; you will be prompted twice for a second authentication factor (by Duo and Google).

Toggle
What if I already use Duo for another employer?

If you use the Duo mobile app, you can still register your smartphone as your second factor. The Duo mobile app will create a Brandeis profile alongside your existing profile. If you currently use a hardware token, you will need to obtain a second hardware token from the Technology Help Desk.