1. Two-factor authentication
Module 3:
Two-factor authentication
Topics:
Two-factor authentication, defined
Duo two-factor authentication at the University of Wyoming
Enroll a device with Duo
Authenticate with Duo
Enroll additional devices
I lost my phone!

2. Two-factor authentication
Two-factor authentication is a log-in method that adds a second layer of security, keeping your account secure even if your password is compromised.
The two layers are often comprised of:
Something that you know (such as a password)
Something that you have (such as a mobile phone)
Something you KNOW
Something you HAVE
ACCESS!

3. Duo at the University of Wyoming
The university is using Duo to provide two-factor authentication services.
Duo requires a phone or other mobile device be used as part of the log-in process.
Authenticate with a username + password
Step 1:
Authenticate with an enrolled mobile device
Step 2:
Successful log-in!
Duo’s updated Guide to Two-Factor Authentication can be found here:

4. Enroll a device with Duo
Once two-factor authentication has been enabled for your account, during the normal log-in process you must enroll a device with the Duo service.
Begin the normal WyoLogin process, and enter your university username + password.
When the two-factor authentication screen appears click Start setup to begin the enrollment process.

5. Enroll a device with Duo
Add a new device
Select the type of device
Mobile phone (recommended)
Tablet
Landline
Enter your phone number (for mobile phone or landline options)
This presentation focuses on the mobile phone option. For other options, see the online Duo guide.

6. Enroll a device with Duo
Select the specific device platform (such as iPhone or Android; for non- smartphones, use the “Other” option)
Install the Duo Mobile app (for smartphones or tablets). Once you select a specific platform, follow the on-screen installation instructions, then click “I have Duo Mobile installed.”

7. Enroll a device with Duo
Configure optional settings
Automate Duo authentication by enabling “Automatically send me a …”
It is recommended that you leave this feature disabled.
If necessary, rename your device
Select a default device
Multiple devices can be enrolled with Duo. This allows two-factor authentication to be completed with a variety of devices.
You have now successfully completed the device enrollment process and are ready to log-in!

8. Each method is explained on the following slides.
Authenticate with Duo
During the log-in process, after a username + password has been entered, the Duo authentication process will begin.
Choose an authentication method.
Duo Push
Call Me
Enter a Passcode
Each method is explained on the following slides.

9. Authenticate with Duo Duo Push
Recommended method for smartphones or tablets only.
Uses the Duo Mobile app installed on a smartphone or tablet.
The device will receive a notification. Press Approve to authenticate.

10. Authenticate with Duo Call Me
Places a call to your enrolled device. Answer the call and press # to authenticate.
This is the preferred method for non-smartphones and landlines.

11. Authenticate with Duo Enter a Passcode
To obtain passcodes, select Enter a Passcode then click Send Codes. A batch of codes will be sent to your device.
Each code can only be used once. Request new codes once all codes have been used.
In cases where you do not have sufficient signal strength on your mobile device, using passcodes will be necessary to log-in. Request them prior to losing wireless signal.
To authenticate, enter the next available passcode.

12. Authenticate with Duo Set a Trusted Device (optional)
Check “Remember me for …”
This setting temporarily configures a specific computer and web browser as a “trusted device” allowing you to skip the Duo authentication process for the specified time.

13. Enroll additional devices
During the authentication process, select Add a new device to enroll additional devices or My Settings & Devices to adjust device settings.
***It is strongly recommended that you enroll more than one device in case your primary device becomes unavailable (e.g. lost or damaged). A good option for a secondary device is your office phone.

14. Enroll additional devices
To enroll additional devices:
Click on Add a new device
Confirm your identity by authenticating with one of your devices
Follow instructions to enroll a new device
You now have multiple devices enrolled
If necessary, set a new device as the default device
During authentication, you are presented with a list of devices. Select one to authenticate.

15. I lost my phone!
Your account is still protected by a password, but two-factor authentication will no longer be possible with the lost device.
If you have registered a second device, authenticate with that device and remove the lost device from Duo.
If there are any concerns about security, please contact the UWIT Service Center immediately.
Visit or and submit a ticket
Call 766-HELP (4357), Option 1

16. Module 3: review
Two-factor authentication adds a second layer of security to the log-in process, and is usually comprised of something you know and something you have.
Using Duo, enroll an initial device, such as a mobile phone, landline, or tablet.
To authenticate with Duo, after you enter your username + password, select your device and method of authentication.
Methods of authentication include Duo Push, phone call, or passcode.
Enroll additional devices to ensure multiple ways to access your account.
Contact the UWIT Service Center for assistance!