Two-factor authentication Module 3: Two-factor authentication Topics: Two-factor authentication, defined Duo two-factor authentication at the University of Wyoming Enroll a device with Duo Authenticate with Duo Enroll additional devices I lost my phone!

Two-factor authentication Two-factor authentication is a log-in method that adds a second layer of security, keeping your account secure even if your password is compromised. The two layers are often comprised of: Something that you know (such as a password) Something that you have (such as a mobile phone) Something you KNOW Something you HAVE ACCESS!

Duo at the University of Wyoming The university is using Duo to provide two-factor authentication services. Duo requires a phone or other mobile device be used as part of the log-in process. Authenticate with a username + password Step 1: Authenticate with an enrolled mobile device Step 2: Successful log-in! Duo’s updated Guide to Two-Factor Authentication can be found here: https://guide.duo.com/

Enroll a device with Duo Once two-factor authentication has been enabled for your account, during the normal log-in process you must enroll a device with the Duo service. Begin the normal WyoLogin process, and enter your university username + password. When the two-factor authentication screen appears click Start setup to begin the enrollment process.

Enroll a device with Duo Add a new device Select the type of device Mobile phone (recommended) Tablet Landline Enter your phone number (for mobile phone or landline options) This presentation focuses on the mobile phone option. For other options, see the online Duo guide.

Enroll a device with Duo Select the specific device platform (such as iPhone or Android; for non- smartphones, use the “Other” option) Install the Duo Mobile app (for smartphones or tablets). Once you select a specific platform, follow the on-screen installation instructions, then click “I have Duo Mobile installed.”

Enroll a device with Duo Configure optional settings Automate Duo authentication by enabling “Automatically send me a …” It is recommended that you leave this feature disabled. If necessary, rename your device Select a default device Multiple devices can be enrolled with Duo. This allows two-factor authentication to be completed with a variety of devices. You have now successfully completed the device enrollment process and are ready to log-in!

Each method is explained on the following slides. Authenticate with Duo During the log-in process, after a username + password has been entered, the Duo authentication process will begin. Choose an authentication method. Duo Push Call Me Enter a Passcode Each method is explained on the following slides.

Authenticate with Duo Duo Push Recommended method for smartphones or tablets only. Uses the Duo Mobile app installed on a smartphone or tablet. The device will receive a notification. Press Approve to authenticate.

Authenticate with Duo Call Me Places a call to your enrolled device. Answer the call and press # to authenticate. This is the preferred method for non-smartphones and landlines.

Authenticate with Duo Enter a Passcode To obtain passcodes, select Enter a Passcode then click Send Codes. A batch of codes will be sent to your device. Each code can only be used once. Request new codes once all codes have been used. In cases where you do not have sufficient signal strength on your mobile device, using passcodes will be necessary to log-in. Request them prior to losing wireless signal. To authenticate, enter the next available passcode.

Authenticate with Duo Set a Trusted Device (optional) Check “Remember me for …” This setting temporarily configures a specific computer and web browser as a “trusted device” allowing you to skip the Duo authentication process for the specified time.

Enroll additional devices During the authentication process, select Add a new device to enroll additional devices or My Settings & Devices to adjust device settings. ***It is strongly recommended that you enroll more than one device in case your primary device becomes unavailable (e.g. lost or damaged). A good option for a secondary device is your office phone.

Enroll additional devices To enroll additional devices: Click on Add a new device Confirm your identity by authenticating with one of your devices Follow instructions to enroll a new device You now have multiple devices enrolled If necessary, set a new device as the default device During authentication, you are presented with a list of devices. Select one to authenticate.

I lost my phone! Your account is still protected by a password, but two-factor authentication will no longer be possible with the lost device. If you have registered a second device, authenticate with that device and remove the lost device from Duo. If there are any concerns about security, please contact the UWIT Service Center immediately. Visit http://uwit.uwyo.edu or http://www.uwyo.edu/infotech/ and submit a ticket Email userhelp@uwyo.edu Call 766-HELP (4357), Option 1

Module 3: review Two-factor authentication adds a second layer of security to the log-in process, and is usually comprised of something you know and something you have. Using Duo, enroll an initial device, such as a mobile phone, landline, or tablet. To authenticate with Duo, after you enter your username + password, select your device and method of authentication. Methods of authentication include Duo Push, phone call, or passcode. Enroll additional devices to ensure multiple ways to access your account. Contact the UWIT Service Center for assistance!