Cyber Security Awareness Month: Enroll in Duo
Author: Sharon Helms, Office of Information Technology
Posted: October 2, 2017

Two-step verification on laptop and mobile phone

October is National Cyber Security Awareness Month, a campaign to promote safety online. Throughout the month we’ll be sharing steps you can take to keep your personal data safe. To get started, we're answering questions about how you can use Duo Two-Step Verification to increase the security of your Portland State University accounts.

Why should you enroll in Duo Two-Step Verification?

Two-step verification, also known as two-factor authentication (2FA) or multi-factor authentication, protects against phishing and secures your logins from attackers who exploit weak or stolen credentials.

At PSU we've added an extra incentive for you to enroll in Duo and add protections to key services: in addition to increasing the security of your online data, you can extend the life of your Odin account password! 

When students add Duo protections to both Single Sign-On and Direct Deposit, their passwords will no longer expire. PSU employees who add these key Duo protections will extend their password expiry from the current 180 days to two years. 

How does two-step verification work?

Two-step verification strengthens the security of your account by requiring two different types of information to confirm your identity. Verifying your identity using a second factor prevents anyone but you from signing in, even if they know your password.

Duo does this by pairing something you know with something you have in your possession. For example, when you sign in to a Duo-protected system with your username and password (something you know), the Duo mobile app will prompt you to verify your identity on your mobile device (something you have). 

Will you be required use two-step verification every time you sign in?

If you designate a trusted device, you won't have to use two-step verification every time you sign in. To designate a trusted device (such as your personal laptop), select the Remember me for 30 days option on the Choose an authentication method screen. You can then sign in on your trusted device without going through the two-step process each time, giving you faster and more secure access.

Additional resources

You can learn more about enrolling a device, adding protections, and the different methods of verification available in our Duo Two-Step Verification overview. For further assistance with using Duo Two-Step Verification, contact the OIT Helpdesk.