Duo 2-Factor Authentication - Enhanced 2-Factor


Introduction

Starting August 4, 2025, Virginia Tech will enhance 2-Factor Authentication (2FA) by requiring a 3-digit code. In the weeks that follow Phone and SMS options will be removed.  We recommend beginning your transition now so you will not be caught off guard.

 

Contents

 

 

Frequently Asked Question(s)

What is 2-Factor and Enhanced 2-Factor?

 

2 Factor Authentication

Virginia Tech requires all students and faculty to use 2-Factor Authentication (2FA) for web services.

2FA means you need two things (factors) to log in:

  • Something you know (like a password)
  • Something you have (like a smartphone)

This is more secure because even if someone steals your password, they’d still need your phone, or vice versa.

Virginia Tech uses Duo 2FA as part of its Single Sign-On (SSO) service, allowing users to authenticate via a code or a “push” notification through the Duo mobile app.

 

Enhanced 2-Factor Authentication

At Virginia Tech, Enhanced 2FA means when a login request is sent to your Duo app, you’ll be prompted to enter a 3-digit code displayed on the device you’re logging in from. This ensures you don’t accidentally approve a fraudulent attempt.

When you log in, the device you're logging in from will display a 3-digit code. You’ll need to enter that code on your phone.

If someone else tries to log in as you, they'll see a code, but you won't. Without seeing the correct number, you can’t approve the request.

It’s quick and painless, and it protects you from accidentally letting someone else into your account.

 

What and Why Is This Changing?

To improve security. The new process asks you to type in a 3-digit code. It's much harder to accidentally approve someone else trying to log in as you.

Due to the change, phone (call) and SMS (text) verification will no longer be accepted. An authentication app or device will be required.

 

Preparing for the Change

Set up 2-Factor Authentication at https://accounts.it.vt.edu

 

Print One Time Passcodes

(Do this before August 4)

If you ever lose access to your phone, these codes may be the only way you can log in without calling support.

  • Visit https://accounts.it.vt.edu
  • Select 2-Factor in the menu.
  • Scroll to One Time Passcodes and click Generate Passcodes.
  • Click Generate.

We recommend saving these codes on paper in a locked safe or drawer, or in a secure password manager if you use one with a strong password and 2FA.

 

Install the Duo App before the change

If you currently use phone call or text verification you will need to install and configure the Duo App (or other solution) before the changeover starting August 4 to avoid rush and potential confusion 

 

How Enhanced 2-Factor Login Will Work

Logging into a VT service, upon entering your username and password, you are presented with a 3-digit code to enter into your Duo app.  

 

On your phone, you will need to enter the number:

 

Enhanced 2-Factor 3 Digit Code Entry

 

DUO App Alternatives