2-factor Authentication, also known as Multi-Factor Authentication is a security measure that effectively proves that the person accessing your accounts is you, and not someone who has fraudulently obtained your password. Enrollment in Duo 2-factor authentication (2FA) is required to log into many Virginia Tech Web-based systems. To use websites and services that use Virginia Tech’s Login service, you are required to authenticate with a second factor.

Contents

General Setup and Use

• How Do I Start Using 2-factor Authentication?
• How Many Devices or Factors Should I Enroll?
• What are all the options for devices I can enroll, and how do I choose between them?
• How Do I Add a New Device?
• How Do I Remove or Delete an Authentication Device from My Duo Account?
• How Do I Get and Print Backup Codes from the Virginia Tech Web Site?

Related Links - DUO Support [Non-VT]

• Documentation from Duo Support
• Using Duo 2-Factor Authentication
• Enrolling, Adding, Managing, or Removing a Duo 2FA Device

How Do I Start Using 2-factor Authentication?

The first time you attempt to access a Virginia Tech service that requires 2-factor authentication, Duo will direct you to enroll a device that you can use for authentication using the interactive Duo web-based prompt. You won’t be able to complete the login process without completing this step first. Follow the on-screen prompts to set up your Duo authentication device.

As a new student or employee, after you create your VT Username you will automatically be directed to the Account Manager application (accounts.it.vt.edu) where you will be able to enroll in Duo.

How Many Devices or Factors Should I Enroll?

Enroll a minimum of two devices. That way if one is unusable, you can use the backup to continue accessing Virginia Tech 2FA websites.

What are all the options for devices I can enroll, and how do I choose between them?

During the Login process, Duo will select the most secure option based on your available devices and configuration. Listed below are the allowed Duo 2FA methods:

• Duo Mobile app with verified push
• Duo Mobile app generated codes
• Biometric Authenticators
  • Apple Touch ID
  • Apple Face ID
  • Windows Hello
  • Android Biometrics
• Browser based passkeys
  • Chrome
• Security keys / passkeys
• Hardware tokens
• Software tokens
  • Google Authenticator
  • Microsoft Authenticator
  • Apple Keychain
• YubiKey passcodes
• Hardware token passcodes

How Do I Add a New Device?

1. When logging into a Virginia Tech 2FA protected website, enter your VT Username and Passphrase.
   1. When the Duo login screen is presented, click on "Other options." NOTE: if the 2FA screen is bypassed, open a new Chrome incognito / Edge inPrivate / Firefox private window and use that to log into the website you need to visit. This will allow you to see the options for managing devices.
2. Follow the directions at Duo’s Add or Manage Devices After Enrollment.

How Do I Remove or Delete an Authentication Device from My Duo Account?

1. Open a new Chrome incognito / Edge inPrivate / Firefox private window.
2. When logging into a Virginia Tech 2FA protected website, enter username/password normally.
3. When the Duo screen is presented, click on Other options.
4. At the bottom, click on Manage Devices.
5. Complete the authentication with your second factor to proceed.
6. Follow the instructions in the Remove Device section on the Rename or Remove a Device page.

How Do I Get and Print Backup Codes from the Virginia Tech Web Site?

1. Log in to the Virginia Tech accounts site at accounts.it.vt.edu.
2. Use the left hand menu to navigate to the 2-Factor page.
3. In the middle of the page, click Generate passcodes.
4. To confirm that you understand the warning displayed, click Generate.
5. On the webpage, click Print.
6. Your printer settings will appear. Select the printer you want to use, and then click OK.
7. Store the printed paper in a secure location, and use a pencil or pen to mark when you use each code. Each code can only be used once.
8. Any Duo passcodes you previously printed from this Virginia Tech website will no longer work.
9. Note that you have to be able to log into the accounts page in order to print backup codes. If you cannot authenticate with any second factor, follow the instructions at Lost, Forgot, Broke, or Unavailable 2-Factor Device instead of these instructions.