Multi-Factor Authentication
What should I do if I get a request to approve a login that I did not initiate?
1. Assume that someone is trying to illegally access your account:
2. Choose “Deny” in the Duo app to block the request, then
3. Immediately call the WCU IS&T Helpdesk at 610-436-3350 and report the attempt!
SEE MORE FREQUENTLY ASKED QUESTIONS ABOUT DUO (below)
Duo Security uses two-factor authentication to verify your identity to ensure that the person trying to access your account is indeed you. It is called two-factor authentication because it uses two forms of authentication to verify your identity: 1) something you KNOW and 2) something you HAVE.
First, when you visit a secured West Chester University application, you will provide something you KNOW - your West Chester University Username and password.
Secondly, you will use something you HAVE - a physical device such as a smartphone or tablet to verify your identity to complete the login. This approach protects your WCU account from fraudulent access and you are then granted secure access to that specific application.
Getting Started
Duo's self-enrollment process makes it easy to register your smartphone or tablet and install the application on your device. You will receive an enrollment invitation email from Duo (noreply@duosecurity.com) containing a link to the self-service portal.
The WCU Enrollment Guide provides detailed instructions to assist you with enrollment. You may also refer to the Duo User Guide available in the sidebar menu of this website.
Frequently Asked Questions
What is two-factor authentication and why is West Chester University using it?
Passwords aren’t enough anymore and are becoming increasingly easy to compromise.
They can often be hacked, guessed or stolen--you might not even know who else has
your password. Over the past few years, identity theft and phishing crimes have increased
exponentially in higher education.
Two-factor (or multi-factor) authentication adds a second layer of security to your
account to make sure that it stays safe, even if someone else knows your password,
by using your phone or other device to verify your identity. You will be alerted right
away (on your smartphone or tablet) if someone tries to log in using your password.
This prevents anyone but you from accessing your accounts.
Once you have enrolled in Duo, you will be able to deny access to your accounts using
your duo-enrolled devices if someone is trying to log in as you.
Which applications will be secured by Duo?
VPN Gateway, email and the suite of Microsoft Office 365 programs, D2L, RamECard and Zoom are some of the applications that will be secured by Duo Multi-Factor Authentication.
How do I get Duo?
Duo's self-enrollment process makes it easy to register your phone or tablet and install the application on your device. To begin the enrollment process, you will receive an enrollment email from "noreply@duosecurity.com". This email will direct you to Duo Self- Enroll for device-specific installation instructions. Please also see the Duo Guide .
How do I use Duo?
Once you enable two-factor authentication, you will be prompted to authenticate on
your default device using the default method you set up. How you authenticate depends
upon the device and method you chose for two-factor authentication
If you chose Duo Mobile push notifications, a push notification is sent to the device,
and you can review the request and tap Approve to authenticate. Internet/cellular
access is required.
If you chose a Duo Mobile passcode, launch the Duo app on your mobile device and click
the key icon to see your current six-digit passcode. Enter the passcode on the two-factor
authentication screen to authenticate. Because this method is time-based, you don’t
need cellular service or internet access.
Remember My Device
The "Remember me for 60 days" feature makes Two-Step Verification more convenient. If you don't see the remember me checkbox or are having trouble using it, please refer to this Guide: Remember Me 60 Days .
What is the recommended two-factor authentication method?
If you have a smartphone or or tablet, we recommend Duo Push, as it is quick, easy-to-use, and secure. Watch an introduction to Duo Security and a demonstration of Duo Push.
How much data does a Duo Push request use?
What about the privacy of my smartphone activity?
What if I do not have a smartphone?
Poor cell signal or no internet?
What if my smartphone is broken, lost or stolen?
What if I get a new mobile device?
What should I do if I get prompted to approve a login but I am not trying to log in?
Assume that someone is trying to illegally access your account:
First, choose “Deny” in the Duo app to block the request, then
Immediately call the WCU IS&T Helpdesk at 610-436-3350 and report the attempt!
I am getting a message that I am locked out. What should I do?
What is Duo Mobile?
Can I opt out of Duo?
What if I only have one device registered and it is not available to access my account?
Can I use Duo traveling internationally?
If you believe the country you are visiting is considered to be high risk, please contact the Help Desk to verify and address any international travel concerns regarding your IT equipment.
Need Help?
For assistance with Duo, please call the IT Help Desk 610-436-3350. You may also open a ticket with ServiceNow.
Training
Duo Enrollment Self-Paced Tutorial provides instructions on the initial setup/enrollment of a smart phone or tablet in West Chester University’s two-factor authentication platform – Duo Security..