Cybersecurity Month: Duo Security two-factor authentication

In honor of Cybersecurity Month, University Technology ([U]Tech) is sharing tips, links, articles and more throughout October to help keep you cyber-secure. Each week, [U]Tech will focus on a different topic; this week’s topic is Duo Security two-factor authentication. Passwords are a part of everyone’s daily digital lives, and as such they are sometimes taken for granted until forgotten, lost, stolen or otherwise compromised. It can be daunting to think that a simple password is the lock to the vault containing your most sensitive information.

Strengthening your sign-ons

The university’s Information Security Office (ISO) evaluates and recommends improved authentication techniques and technologies. CWRU account holders have been using Duo Security as a second layer of protection (two-factor authentication) to Virtual Private Network. Now it will be available to protect the Human Capital Management (HCM) and Financials (FIN) applications through the single sign-on process. On Monday, Nov. 6, those already using Duo Security will be automatically switched over on HCM and FIN, and others can opt in.

Two steps for enhanced protection

Two-factor authentication offers an additional security measure to verify your identity in addition to your login and password. Duo Security provides a unique code generated by the Duo Mobile app on your smartphone as the second factor. Other methods include phone call via landline phone or a hardware token provided by CWRU. You’ll need to enroll any device you plan to use; multiple devices are permitted. It takes only a small amount of setup and a few seconds at each login to keep your account access secured. The chief information security officer encourages the use of Duo Security by the CWRU community. For more about the role of Duo Security at CWRU and how to use it, visit the ISO site for:

• An overview
• Device enrollment
• Training videos
• Lost phone directions