What should I do if I get a Duo request to approve a login that I did not initiate?
1. Assume that someone is trying to illegally access your account:
2. Choose "Deny" in the Duo app to block the request, then
3. Immediately call the WCU IS&T Helpdesk at 610-436-3350.
Additional information is available in the following Knowledge Base article: What should I do if I receive a Duo login request that I did not Initiate
SEE MORE FREQUENTLY ASKED QUESTIONS ABOUT DUO (below)
Duo Security uses two-factor authentication to verify your identity to ensure that the person trying to access your account is indeed you. It is called two-factor authentication because it uses two forms of authentication to verify your identity: 1) something you KNOW and 2) something you HAVE.
First, when you visit a secured West Chester University application, you will provide something you KNOW - your West Chester University Username and password.
Secondly, you will use something you HAVE - a physical device such as a smartphone or tablet to verify your identity to complete the login. This approach protects your WCU account from fraudulent access and you are then granted secure access to that specific application.
Duo's self-enrollment process makes it easy to register your smartphone or tablet and install the application on your device. You will receive an enrollment invitation email from Duo (firstname.lastname@example.org) containing a link to the self-service portal.
The WCU Enrollment Guide provides detailed instructions to assist you with enrollment. You may also refer to the Duo User Guide available in the sidebar menu of this website.
Frequently Asked Questions
Passwords aren’t enough anymore and are becoming increasingly easy to compromise.
They can often be hacked, guessed or stolen--you might not even know who else has
your password. Over the past few years, identity theft and phishing crimes have increased
exponentially in higher education.
Two-factor (or multi-factor) authentication adds a second layer of security to your account to make sure that it stays safe, even if someone else knows your password, by using your phone or other device to verify your identity. You will be alerted right away (on your smartphone or tablet) if someone tries to log in using your password. This prevents anyone but you from accessing your accounts.
Once you have enrolled in Duo, you will be able to deny access to your accounts using your duo-enrolled devices if someone is trying to log in as you.
VPN Gateway, email and the suite of Microsoft Office 365 programs, D2L, RamECard and Zoom are some of the applications that will be secured by Duo Multi-Factor Authentication.
Duo's self-enrollment process makes it easy to register your phone or tablet and install the application on your device. To begin the enrollment process, you will receive an enrollment email from "email@example.com". This email will direct you to Duo Self- Enroll for device-specific installation instructions. Please also see the Duo Guide .
Once you enable two-factor authentication, you will be prompted to authenticate on
your default device using the default method you set up. How you authenticate depends
upon the device and method you chose for two-factor authentication
If you chose Duo Mobile push notifications, a push notification is sent to the device, and you can review the request and tap Approve to authenticate. Internet/cellular access is required.
If you chose a Duo Mobile passcode, launch the Duo app on your mobile device and click the key icon to see your current six-digit passcode. Enter the passcode on the two-factor authentication screen to authenticate. Because this method is time-based, you don’t need cellular service or internet access.
The "Remember me for 60 days" feature makes Two-Step Verification more convenient. If you don't see the remember me checkbox or are having trouble using it, please refer to this Guide: Remember Me 60 Days .
If you have a smartphone or or tablet, we recommend Duo Push, as it is quick, easy-to-use, and secure. Watch an introduction to Duo Security and a demonstration of Duo Push.
Assume that someone is trying to illegally access your account:
First, choose “Deny” in the Duo app to block the request, then
Immediately call the WCU IS&T Helpdesk at 610-436-3350 and report the attempt!
If you believe the country you are visiting is considered to be high risk, please contact the Help Desk to verify and address any international travel concerns regarding your IT equipment.
For assistance with Duo, please call the IT Help Desk 610-436-3350. You may also open a ticket with ServiceNow.
Duo Enrollment Self-Paced Tutorial provides instructions on the initial setup/enrollment of a smart phone or tablet in West Chester University’s two-factor authentication platform – Duo Security..