Multi-Factor Authentication

Step 1: Register your phone/devices

1. To register one or more eligible devices/phone numbers with NYU's Multi-Factor Authentication vendor, Duo, use a web browser to log into the NYU Start page (start.nyu.edu) with your NetID and password. Note: Although the preferred primary device to register is a smartphone, NYU strongly encourages you to register at least two options, which can include an office phone or other landline, tablet, smart watch, simple cell phone, or a different smartphone.
2. In the menu that opens, click the NYU Multi-Factor Authentication Registration & Update link.
3. You will be directed to a page that describes NYU Duo Multi-Factor Authentication and the registration process.
4. Select Continue to be directed to the registration page where you can register multiple phone numbers or devices to use with NYU Multi-Factor Authentication.
5. Once registered, you will receive an email with additional information. *Note: If you registered a smartphone, you will also receive two SMS text messages:
   
   • The first text message provides a link to download the mobile app from your smartphone's app store.
   • The second text message provides an account activation link.

Continue to Step 2 to complete the smartphone or tablet registration process. If your primary authentication choice is a telephone landline, skip to Step 3.

* If you did not receive the text message link to download and activate your Duo Mobile app, it is likely you registered your smartphone as a basic cell phone. Please follow the instructions in this article for adding your smartphone as a new device. Enter your already-registered mobile phone # and make sure to select the device type (mobile) and platform (iPhone, Android, etc). Follow the on-screen steps to download and activate the Duo Mobile app.

Step 2: Download & install the Duo Mobile App

1. Click on the link provided in the first text message you received after registering your mobile phone number.
2. Download the Duo app to your smartphone.
3. Open the Duo Mobile App.
4. Allow Duo to send you notifications.
5. Accept the license agreement.
6. Do not click on "Add account" at this point.

Finally, in your text messages, click the account activation link provided in the second message you received. You should then see your account added to the Duo Mobile App.

This completes the enrollment and activation process so you can begin to use MFA when you log into NYU services that you access via the NYU Login page (also known as Single Sign-On or SSO services). You can check to ensure that everything worked properly by pointing your device's web browser to start.nyu.edu/duo/test. 

Step 3: Use MFA

Watch the below video for an overview of how to use NYU Duo Multi-Factor Authentication (MFA) to log in to a system that uses MFA, or see the following FAQ for device options.

Once you’ve enrolled in NYU Multi-Factor Authentication, you can add or update your MFA devices anytime via the NYU Start Page at start.nyu.edu. Note that NYU suggests that you enroll at least two phone numbers and/or devices in NYU MFA.

1. Log into the NYU Start Page with your NetID and password, then click NYU Multi-Factor Authentication Registration & Update.
2. Confirm your identity using your already-registered MFA device. Follow the steps on the screen to receive a DUO push, a text message, or a call on a landline.
3. Click +Add a new device.
4. Now, select the type of device you are adding.
5. Register your new device by entering the phone number. (If you selected tablet you will not be asked to enter a phone number).
6. (Smartphone or tablet) Select the phone's operating system. If you have not installed Duo on your new device, follow the on-screen steps to add the Duo mobile app. If you already have it, click I have Duo Mobile installed. Next, follow the on-screen steps to scan the QR code and activate the app. Registration for this device is now complete
   Note: The ability to scan a QR code to activate the Duo Mobile app is always available once you have enrolled a device. You will only receive a text link during the initial enrollment of a smartphone in NYU Multi-Factor Authentication. If you thought you enrolled a smartphone, but did not receive a text link, please see the NYU MFA: Did not receive Duo Mobile activation text link (for NYU MFA) article for more information.
7. (Landlines only) Select to receive a phone call or text message. Enter the verification code provided. Registration is complete at this point. You will then be returned to the devices screen.
   

To ensure your device has been added properly, go to start.nyu.edu/duo/test using your device’s web browser and follow the on-screen instructions.

To update an already-registered device (e.g., if you have lost your device, your phone number has changed, or you’ve upgraded your phone or device):

1. Log into the NYU Start Page with your NetID and password, and then click NYU Multi-Factor Authentication Registration & Update.
2. Confirm your identity using your already-registered Duo phone number or device.
3. Click +Add a new device.
4. Select Device Options next to the phone number/device you are updating.
   
   • For a landline, you may select “Change device name” or click the trash icon to delete that phone number if you no longer use it.
   • For a mobile phone or tablet, you may select “Reactivate Duo Mobile,” “Change device name,” or click the trash icon to delete this device if you no longer use it.

If you have selected to reactivate, confirm the device platform (iPhone, Android, other, etc.) and that you have the Duo Mobile app installed. Follow the on-screen steps to scan the QR code to activate the app.

To ensure your device has updated properly, go to start.nyu.edu/duo/test using your device’s web browser and follow the on-screen instructions. If you need assistance, contact the NYU IT Service Desk, open 24x7.

If you are using your phone or device with NYU Multi-Factor Authentication and lose that device or suspect that it has been stolen, please contact the IT Service Desk immediately (open 24/7). Service Desk staff will disable the device for Multi-Factor Authentication and help you log in using another device or bypass code.

While it is important that you contact the IT Service Desk, if you lose your phone, remember that your password will still protect your account(s).

Did you forget your phone at home and as a result, do not have another device on hand to authenticate? A temporary bypass code is available in the event you lack access to your MFA device. Please contact the IT Service Desk, open 24/7. An IT support specialist will verify your identity and provide a temporary bypass code and further instructions.