Two Factor Authentication (2FA)

Adds an extra layer of security to your University accounts.

Verifying your identity using a second factor (like your phone or other mobile device) prevents others from accessing your accounts, even if they know your password.

Contents

1. How it works

2. How to enroll

How it works

Logging into 2FA protected sites and applications is as simple as accepting a notification on your phone, plugging in an authenticator, or entering a PIN from a text message or phone call. Enrol once to protect all of your supported services.

2FA at Waterloo is powered by DUO. 

Recommended option: The DUO mobile app is the recommended second factor solution for campus. The mobile app is very easy to use and provides the highest level of security of the available 2FA options. However, employees who would prefer not to download and use the DUO mobile app on a personal device may request an authenticator from IST. 

What is an authenticator? Also known as a DUO hardware token, it is a physical fob with a button the employee will press to receive a verification code to enter when prompted by the application. The DUO token will be provided to employees who require an authenticator as part of their job (i.e., as a result of the data or applications they have access to). 

 Note: Employees who do not require an authenticator as part of their job and all Waterloo students may purchase a U2F key from an external provider for personal use, if desired. 

 Who can request an authenticator? Individual employees or department heads may submit a request to IST.  

 Requesting an authenticator: Please complete the request form Requesting a Token Key or visit an Information Systems & Technology (IST) Service Desk. 

 Important notes:  

  • IST will cover the cost of the employee's first DUO hardware token. 
  • Lost or stolen tokens can be replaced by the employee's department at a cost of approximately $40.  
  • DUO hardware tokens can be reprogrammed for use by a new/different employee.  
  • Defective hardware tokens will be replaced at no cost.  

Please submit all replacement, reprogramming, or defective token support requests via 2FA token request or by visiting an IST Service Desk. 

To learn more about two-factor authentication and managing your account, please visit our 2FA website: (https://uwaterloo.ca/request-tracking-system/2fa-token-request). 

How to enroll to the two factor Authentication

  1. Download duo mobile to your phone
  2. Log in to the 2FA Device Management Portal at: Sign In  
    window with the device management portal
  3. In the Device Management Portal, “+ Add another device” then select the “Tablet”
    Windows with options to select from and tablet select it
  4. Select iOs  or Android depending on what phone do you have
    windows with the type of device that you have options iOS or Android
  5. It will ask you if you have duo mobile install on your phone; click on I have duo mobile installed
    windows with install duo mobile in your android/iOs and I have Duo Mobile installed
  6. It will ask you to scan the QR Code with the Duo Mobile app in your phone to do this follow this instructions:
    1. Open the duo mobile
    2. Click on Add  
    3. Select scan QR code. 
    4. Point the camera phone to the QR in the browser.

    Click on continue

    Windows showing a QR to scan with the phone
  7. it will take you back to the device options with your android/iPhone device.
  8. Now when you login to any sites or services that need the authentication it will send you a Approve/Deny access to your phone.