What is 2FA?
2FA adds a layer of security when you sign in with your UW NetID. With 2FA, first you enter your password, then use a 2FA device to prove it's really you.
When do I sign in with 2FA?
You must sign in with 2FA to access systems such as Workday or Hyak that require 2FA, or when you or an organization you belong to has opted in to 2FA on the web.
Why do I need 2FA?
2FA prevents others from signing in as you, even if they know your password. It protects you and the UW from the risks of phishing scams and other forms of passwords theft.
Getting started
Manage your device(s), once you've installed Duo
If you're ready to enroll a device, use this button:
Manage 2FA Devices & Settings
Choose a device to use
If you're choosing a device to use, this information is for you:
We recommend using Duo Mobile on your smartphone because it's free, secure, and simple to use. Duo Mobile creates no data on your device. The following table describes types of 2FA devices and their options for signing in.
| Device type |
Sign-in options |
Notes |
| Smartphone or Tablet (Recommended) Supported platforms:
|
- "Send Me a Push" - Duo Push notification
- "Enter a Passcode" - from Duo Mobile
- "Call Me" - Phone call
|
- Duo Mobile is free to download
- Duo Push notifications need an internet connection (Wi-Fi or cellular data)
- Passcodes can be generated by Duo Mobile without an internet connection
- "Call Me" option only works with phone numbers in the US and parts of Canada
|
Smartphone or computer Supported platforms:
- Some mobile phone operating systems
- Some computers with biometric support
|
|
- Platform authenticators are only available for authentication while logging in via a configured device
|
Mobile Phone or Landline Supported platforms:
- Any mobile phone
- Any landline phone
|
|
- "Call Me" option only works with phone numbers in the US and parts of Canada
|
Hardware Token Supported platforms:
- Hardware token provided by UW-IT
- Other compatible hardware token
|
|
- One-button device that generates a one-time passcode
- Learn more about hardware tokens
|
Sign in with 2FA
Once you set up a device, you'll be ready to sign in with 2FA. Sign-in options depend on your choice of device (above). They include:
- "Send Me a Push" - Duo sends a notification to Duo Mobile on your smartphone or tablet. You then tap "Approve" to sign in. An internet connection (Wi-Fi or cellular data) is required to receive push notifications.
- "Enter a Passcode" - Open Duo Mobile on your smartphone or tablet to generate a passcode, with or without an internet connection. Or, if you have a hardware token, use the passcode from it.
- "Platform authentication" - Duo will prompt your device to authenticate you via your devices biometric or other platform specific software.
- "Call Me" - Duo calls your smartphone, mobile phone, or landline. Answer the call and follow the instructions to approve. This option only works with phone numbers in the US and parts of Canada.
To learn more about the steps, review how to sign in with 2FA.
More Information