Multi-Factor Authentication

Step 1: Register your phone/devices

1. To register at least two eligible devices/phone numbers with NYU's Multi-Factor Authentication vendor, Duo, use a web browser to log into the NYU Start page (start.nyu.edu) with your NetID and password. Note: Although the preferred primary device to register is a smartphone, NYU strongly encourages you to register at least two options, which can include an office phone or other landline, tablet, smart watch, simple cell phone, or a different smartphone.
2. In the menu that opens, click the NYU Multi-Factor Authentication Registration & Update link.
3. You will be directed to a page that describes NYU Duo Multi-Factor Authentication and the registration process.
4. Select Continue to be directed to the registration page where you can register multiple phone numbers or devices to use with NYU Multi-Factor Authentication.
5. Once registered, you will receive an email with additional information. *Note: If you registered a smartphone, you will also receive two SMS text messages:
   
   • The first text message provides a link to download the mobile app from your smartphone's app store.
   • The second text message provides an account activation link.

Continue to Step 2 to complete the smartphone or tablet registration process. If your primary authentication choice is a telephone landline, skip to Step 3.

* If you did not receive the text message link to download and activate your Duo Mobile app, it is likely you registered your smartphone as a basic cell phone. Please follow the instructions in this article for adding your smartphone as a new device. Enter your already-registered mobile phone # and make sure to select the device type (mobile) and platform (iPhone, Android, etc). Follow the on-screen steps to download and activate the Duo Mobile app.

Step 2: Download & install the Duo Mobile App

1. Click on the link provided in the first text message you received after registering your mobile phone number.
2. Download the Duo app to your smartphone.
3. Open the Duo Mobile App.
4. Allow Duo to send you notifications.
5. Accept the license agreement.
6. Do not click on "Add account" at this point.

Finally, in your text messages, click the account activation link provided in the second message you received. You should then see your account added to the Duo Mobile App.

Opt-in now to use MFA when logging into NYU services that you access via the NYU Login page (also known as Single Sign-On or SSO services). You can check to ensure that everything worked properly by pointing your device's web browser to start.nyu.edu/duo/test.

Step 3: Use MFA

Watch the below video for an overview of how to use NYU Duo Multi-Factor Authentication (MFA) to log in to a system that uses MFA, or see the following FAQ for device options.

Smartphone

A smartphone is a mobile phone capable of running downloaded mobile apps. The most common smartphones are Apple iPhones and (Google) Android phones. At the end of the registration process, you can install the Duo Mobile app on your smartphone. Next, provide a requested second login factor using any of the following methods:

• Duo Push: If the Duo Mobile app is installed on your smartphone, you receive a push notification and can approve the authentication request.
• Passcode via Duo Mobile app: If you have the Duo Mobile app installed, you can obtain a single passcode by tapping the key next to "New York University" in the mobile app. This passcode must be used immediately. This is a good option if you do not have existing SMS passcodes and do not have a good wireless or WiFi signal on your phone. No cellular (or Internet) coverage is needed to generate a passcode on the Duo app.
• Passcodes via SMS: You receive a batch of one-time use passcodes via text message. These codes do not expire and are used sequentially.
• Phone call: You receive a phone call from Duo. The call gives instructions on approving or denying the authentication attempt.

Simple cell phone

If you have a basic mobile phone for making and receiving phone calls, as well as SMS text messages, you can provide a requested second login factor by either:

• Phone call: You receive a phone call from Duo. The call gives instructions on approving the authentication request.
• Passcodes via SMS: You receive a batch of one-time use passcodes via text message. These codes do not expire and are used sequentially.

Office landline

If you have an NYU phone installed in your office or work area for your use, you can provide a requested second login factor by:

• Phone call: You receive a phone call from Duo. The call provides instructions for approving the authentication request.

Home landline

If you have a telephone installed in your home, you can provide a requested second login factor by:

• Phone call: You receive a phone call from Duo. The call gives instructions on approving the authentication request.

Tablet

If you have a wireless, portable personal computer with a touch screen interface (smaller than a notebook but larger than a smartphone), you can provide a requested second login factor by:

• Duo Push: If the Duo Mobile app is installed on your tablet, you receive a push notification and can approve the authentication request.
• Passcode via Duo Mobile app: If you have the Duo Mobile app installed, you can obtain a single passcode by tapping the key next to "New York University" in the mobile app. This passcode must be used immediately. No cellular (or Internet) coverage is needed to generate a passcode on the Duo app.
   

Once you’ve enrolled in NYU Multi-Factor Authentication, you can add or update your MFA devices anytime via the NYU Start Page at start.nyu.edu. Note that NYU suggests that you enroll at least two phone numbers and/or devices in NYU MFA.

Adding a new phone or device

1. Log into the NYU Start Page with your NetID and password, then click NYU Multi-Factor Authentication Registration & Update.
2. Click Add a new device.
3. Confirm your identity using your already-registered MFA device.
   
   • Follow the steps on the screen to receive a DUO push, a text message, or a call on a landline.
4. Now, select the type of device you are adding.
5. Register your new device by entering the phone number. (If you selected tablet you will not be asked to enter a phone number).
6. Verify ownership of the device.
7. (Landlines only) Select to receive a phone call. Enter the verification code provided. Registration is complete at this point. You will then be returned to the devices screen.
8. (Smartphone or tablet) Select the phone's operating system. If you have not installed Duo on your new device, follow the on-screen steps to add the Duo mobile app. If you already have it, click I have Duo Mobile installed. Next, follow the on-screen steps to scan the QR code and activate the app. Registration for this device is now complete

To ensure your device has been added properly, go to start.nyu.edu/duo/test using your device’s web browser and follow the on-screen instructions. 

Updating or removing an already-registered phone or device

To update an already-registered device (e.g., if you have lost your device, your phone number has changed, or you’ve upgraded your phone or device):

1. Log into the NYU Start Page with your NetID and password, and then click NYU Multi-Factor Authentication Registration & Update.
2. Click My Settings & Devices.
3. Confirm your identity using your already-registered Duo phone number or device.
4. Select Device Options next to the phone number/device you are updating.
   
   • For a landline, you may select “Change device name” or click the trash icon to delete that phone number if you no longer use it.
   • For a mobile phone or tablet, you may select “Reactivate Duo Mobile,” “Change device name,” or click the trash icon to delete this device if you no longer use it.

If you have selected to reactivate, confirm the device platform (iPhone, Android, other, etc.) and that you have the Duo Mobile app installed. Follow the on-screen steps to scan the QR code to activate the app.

To ensure your device has updated properly, go to start.nyu.edu/duo/test using your device’s web browser and follow the on-screen instructions. If you need assistance, contact the NYU IT Service Desk, open 24x7.

If you are an NYU technical staff member who needs to implement an integration of the Multi-Factor Authentication service for an application or website, please complete the Multi-Factor Authentication Planning Questionnaire and send it to the Identity Services team at idm.services@nyu.edu to initiate the process.