Multi-Factor Authentication (Duo)
Enrolling in and Using MFA
Follow the instructions below to start benefiting from the additional security provided by NYU Multi-Factor Authentication (MFA).
TIP: For the best MFA experience, enroll two or more devices and use the Duo Mobile app to easily authenticate even without cell or Internet service and when traveling. See below for instructions.
How to enroll your first device(s) and use MFA
Step 2: Manage MFA Devices & Settings
Step 3: Using NYU MFA
Step 4: Make MFA Simple to Use
There are few hints on how to make MFA easier to use throughout your day:
- Upon your first MFA login of the day, navigate to NYUHome, NYU Email (Google), or another website that you use often and select the “Remember Me for 1 day” checkbox before authenticating. Note that other websites will require the same checkbox to be selected, so start with a website that you plan to use frequently throughout the day.
- On the NYU Start page, set your smartphone to be your default device and configure NYU MFA to “Automatically send this device a Duo Push”.
- Owners of MacBook laptops and iPhones with Touch ID can now easily use their fingerprint to authenticate with NYU Multi-Factor Authentication (MFA).
Other user-friendly NYU MFA options include Apple Watches, Chromebooks, and—most popular of all—the Duo Mobile app for mobile devices and tablets. Visit the ServiceLink knowledge base to learn more.
- When connected to Wi-Fi, depending on the locale, push notifications may not show immediately on smartphones. Open the Duo Mobile app and the notification will be there for you to accept.
- You can always open the Duo Mobile app and obtain a passcode to enter manually, even in airplane mode or anywhere without cell and/or wireless signal.
See the below list for more device options.
Can't access your primary MFA device? Use your alternate device or call for help
Reporting a lost or stolen MFA device
If you are using your phone or device with NYU Multi-Factor Authentication and lose that device or suspect that it has been stolen, please contact the IT Service Desk immediately (open 24/7). Service Desk staff will disable the device for Multi-Factor Authentication and help you log in using another device or bypass code.
While it is important that you contact the IT Service Desk, if you lose your phone, remember that your password will still protect your account(s).
More MFA Support
Explore these self-service MFA articles:
- Managing Multi-Factor Authentication devices & settings (add, update, remove)
- MFA tips, including setting a default device and push notification
- Using Multi-Factor Authentication (on the various phone and device options)
- Configuring an iPhone
- MFA can remember you for 24 hours
- Using the Duo Mobile app to generate a passcode (even without internet or cell service)
- What to do if you can't access your MFA device when you need to log in
- Using NYU Multi-Factor Authentication while traveling
- MFA troubleshooting FAQ
- Hardware token FAQ
Multi-Factor Authentication (MFA) adds a second layer of security to help prevent anyone other than you from accessing your sensitive information online. This is accomplished using two types of authentication to verify your identity when logging into a system.
- First, you need to log in with your password—something you know—and username (usually your NYU NetID).
- Second, you use a physical device—something you have with you when you log in—such as your mobile phone, tablet, or landline phone, to confirm your identity.
The device that is most convenient for this purpose is a mobile phone with an MFA app installed on it. Alternatively, an SMS text message can be sent with a series of one-time passcodes for you to type in. Or, you can receive a phone call.
The service NYU uses for MFA is called Duo.