Why is two-factor authentication important?

Accounts can be compromised through various means, often through phishing or web surfing.  Once a cyber criminal has access to your account they can view your private and confidential information (such as pay stubs or W2s).  They can also use your email to try and gain access to your online banking, social media, or other email accounts you may have;  they may send phishing messages to your contacts or others, and use your account for sending spam or engage in other illegal activities.  

Two-factor authentication adds an extra step to the Smith login process, most commonly tapping an alert on your smartphone, and is the best protection against account compromise.  If you use online banking, you probably already use some form of two-factor authentication.  Most account compromise attacks come from email messages or web sites,  Mac users and Windows users are both equally vulnerable to having your account compromised.

DUO Presentation Slides (PDF)

No. However, it's easiest if you have a phone that can run the Duo app and receive texts. In a pinch, you can use a landline, or one of several other options.

Any service that uses Smith’s Single Sign On for authentication will also require Duo for authentication once activated.  The most common services included are Smith email, Portal, Moodle and VPN.

• Register at least two devices for authentication verification.

We strongly recommend that you register at least one additional device (such as a tablet, a landline, or a U2F Token) before something like that happens. You should then be sure to delete the lost or broken device from your Duo account.

Duo no longer presents users with a "Remember me for 30 days" message. It now asks if you want to trust the browser you are logging in on (if you choose to trust it, it will skip the Duo authentication for the next 30 days on that browser only).

The "Trust this device" option is tied to a specific browser on one computer. You can open a different browser and/or log into shibboleth on a different device, which will require you to authenticate;  you should then be able to access the settings for your Duo account from the menu options on the left side of the Duo screen. You can also open a Chrome incognito window. (Ctrl+Shift+N)

Check your phone’s settings to be sure that alerts are enabled for the Duo application.  Also, try actually opening the Duo app to be sure that the push request is reaching your phone.

If you purchased a new phone with the same number or a new number you can follow these instructions to reactivate DUO. View Instructions

If you’re out of options to authenticate -- your phone is back in your room, you’re not at your registered land line, etc, there is one additional option:  you can contact the ITS Service Center 413-585-4487 or e-mail ithelp@tsunoi-toso.com during normal business hours.  Once you have verified your identity to them over the phone, they can generate a short term one-time code that you can use to verify your authentication.  This temporary code typically is a one time use code that expires within an hour.

1. You don't need cell service to get a push from the app on your phone. As long as your device has wifi connectivity where you are, you will still be able to receive Duo pushes on it.
   
   
2. Before you leave, stop by the IT Service Center in Seelye Hall B8 and pick up a Security Token. Register the token as a new device, it is fast, easy, and does not require a push, text or callback for verification.
   
   
3. If you’re stuck and don’t have other options, contact the IT Service Center during business hours at 413-585-4487 or ithelp@tsunoi-toso.com and they can give you a temporary passcode that is good for 1 hour.  

We recommend that you use different browsers for separate accounts; for example, use Chrome when accessing your Smith account, and Firefox when accessing your personal account.

No, your access to the other account will not be affected as delegated accounts are not directly logged in.

A U2F (Universal 2nd Factor) token is a small USB device that you plug into your computers USB port to authenticate to Duo. These can be picked up at the IT Service Center in Seelye Hall B8 or purchased from the Smith College Computer Store. Here are instruction on to use it as a additional authentication device.