Multi-Factor Authentication

Coming fall 2017: NYU MFA will be required to access most NYU services

To help prevent unauthorized access to your sensitive online information, NYU will implement Multi-Factor Authentication on most NYU sites where you use your NYU NetID and password to log in. 

Get ahead of the game by opting in now and registering at least two options to use with NYU MFA. Also, be sure to download and install the Duo Mobile app, which allows you to approve push notifications, as well as generate login passcodes in areas without Internet connectivity or cell service. See below for more information.

What is Multi-Factor Authentication?

Multi-Factor Authentication (MFA) adds a second layer of security to help prevent anyone other than you from accessing your sensitive information online. This is accomplished using two types of authentication to verify your identity when logging into a system.

  1. First, you need to log in with your password—something you know—and username (usually your NYU NetID).
  2. Second, you use a physical device—something you have with you when you log in—such as your mobile phone, tablet, or landline phone, to confirm your identity.

The device that is most convenient for this purpose is a mobile phone with an MFA app installed on it. Alternatively, an SMS text message can be sent with a series of one-time passcodes for you to type in. Or, you can receive a phone call.

The service NYU uses for MFA is called Duo.

Why Use MFA?

NYU IT strongly recommends and/or requires MFA for access to critical systems or systems storing sensitive data because MFA provides much stronger insurance that that information is only accessible to the intended people, and that the systems remain highly available. MFA will be used in the future by an increasing number of NYU services, or by designated users of a given service.

Getting Started

To get started, follow the instructions below to enroll at least two options in Multi-Factor Authentication and install the mobile app on your preferred device (which allows you to authenticate even if you don't have cell or Internet service). For additional information, see the MFA support articles below and to the right, or watch the videos below.