What is two-factor authentication?
Two-factor authentication adds a second layer of security to your online accounts by requiring a second piece of information before you can log into a system. Verifying your identity using a second factor (a verification code sent to the free Duo app, your phone or another device) prevents anyone but you from logging in, even if they know your password.
Did you receive a Duo push that you didn't ask for?
Hit deny or delete/report text then Report the Smishing attempt. For more information on smishing and Duo scams, please see our Phishing webpage.
Check out the NEW security measures on Duo
Check out the NEW security measures on Duo
Upcoming Duo Push Changes for Employees
The ITS security and identity management teams are adding verification to the Duo Push action for all employees. A verified Duo Push requires the user to enter a code shown on the log-in screen into the Duo app, reducing the risk of scam attacks.
New compliance requirements for computers and devices used for Duo authentication are also being added for privileged accounts and employee accounts. Users will see a suggested update for their systems, browsers and plug-ins when 14 days out of compliance. After 30 days, users will not be allowed access until operating systems, internet browsers and plug-ins are updated.
Why do I need UL2FCTR / Duo ?
Passwords to a user’s account are becoming easy to compromise. Passwords can often be stolen, guessed or hacked — you might not even know someone is accessing your information. Two-factor authentication keeps your account secure even if your password is compromised. Our two-factor authentication system is a Duo application specific to UofL named UL2FCTR. With UL2FCTR or Duo, you'll be alerted right away (on your phone) if someone is trying to log in as you.
ULink’s Student System, WorkdayHR, Blackboard and our VPN all require UL2FCTR / Duo. We are eventually adding this requirement to all systems to provide better protection for everyone’s personal information and increasing the security of campus data assets. The second factor of authentication is independent from your UofL userID and password. UofL’s UL2FCTR is available without cost to all students and employee through our enroll/login above; sync to the downloadable Duo app free from your preferred app store.
Sign Up Instructions
How it works
First, all students, faculty and staff must enroll in UofL’s Duo. The sign-up process is required to be registered in our UL2FCTR / Duo and set up your preferred two-step confirmation process.
Using a desktop, laptop, tablet or mobile device, log into our system with your UofL userID and password. You will need to be current with your operating system and browser for the process to begin. Follow the prompts to enroll – steps will differ depending on device used and selections – and set up at least one option for verifying your identity (two options for confirmation recommended). You can register multiple devices or methods to your UL2FCTR / Duo account in order to provide the necessary confirmation code. Specific instructions available on Duo’s Guide.
Once you’ve enrolled and set up your preferences, familiarize yourself with the ways to use Duo. Downloading the free Duo app to a smart device and using the ‘push’ notifications for each verification process is preferred and highly recommended. Always using the Duo app for the second factor authentication is the easiest method for quickly confirming your logging into the system requiring UL2FCTR.
For more information, check out these videos. If you have issues, contact our ITS HelpDesk.
UofL is not liable for costs associated with the use of a device for SMS messaging, phone calls, data usage or roaming charges.