Two-Step Verification, or Multi-Factor Verification, is an additional layer of protection beyond the standard password login. It drastically reduces the risk of compromised data and accounts preventing unauthorized access even if a password is compromised. Passwords can be shared, however authenticator apps, such as Duo Mobile, can only be validated on the device in which they are registered. 

We strongly recommend that you enroll in Duo Push when setting up your two-step verification. The user receives a popup message on their smartphone much like in the image above. They will then enter a 3-digit number on the login screen to continue.   

 

 

To set up Duo Push for the first time:

For guidance from ISC and instructions to set up Duo, click here -- https://isc.upenn.edu/resources/two-step-verification-duo/two-step-verification-enrollment-instructions 

 

To set up Duo Push on a replaced phone:

https://isc.upenn.edu/resources/two-step-verification-duo/two-step-verification-configuring-replacement-phone 

For more information, click here for guidance from ISC for all UPenn faculty and staff - https://www.isc.upenn.edu/how-to/two-step-verification-enrollment-instructions

 

Two-Step Verification for PennO365:

Two-Step Verification is required for all SAS Faculty and Staff and is synced to your PennKey Two-Step Verification. It's easy to use, and it dramatically increases the security of your PennKey and PennO365 protected accounts. 

If you have additional questions, please contact your Local Support Provider (LSP).

Two-Step Verification for Google@SAS:

To add another layer of security to your Google@SAS or personal Gmail account you can enroll in Google Two-Step Verification here.