Issue
- What is Duo?
- What is Two-Factor Authentication(2FA)?
- Why do I need Duo?
Environment
- MyVU Login Portal
- VPN
- Any system that uses University Single Sign On (SSO)
Resolution
What is Duo?
Duo is a Multi-Factor Authentication(MFA) provider. Duo MFA makes Two-Factor Authentication(2FA) easy for both administrators and users. Duo provides an easy-to-use, secure mobile authentication app for quick, push notification-based approval to verify your user’s identity with smartphone, smartwatch, and hardware token support.
What is Two-Factor Authentication(2FA)?
2FA is an extra layer of security used to make sure that people trying to gain access to an online account are who they say they are. First, a user will enter their username and a password. Then, instead of immediately gaining access, they will be required to provide another piece of information. This second factor could come from one of the following categories:
- Something you know: This could be a personal identification number (PIN), a password, answers to “secret questions” or a specific keystroke pattern
- Something you have: Typically, a user would have something in their possession, like a credit card, a smartphone, or a small hardware token
- Something you are: This category is a little more advanced, and might include biometric pattern of a fingerprint, an iris scan, or a voice print
With 2FA, a potential compromise of just one of these factors won’t unlock the account. So, even if your password is stolen or your phone is lost, the chances of a someone else having your second-factor information is highly unlikely.
Why do I need Duo?
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.
Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.
This second factor of authentication is separate and independent from your username and password.