Duo for Students, Retirees & Guests

 Here's how to enroll in Duo

Enrolling in Duo Multi-Factor Authentication (MFA) takes less than three minutes, and it's set up through the system you use to manage your NetID. See the steps. 

TU faculty and staff have used Duo multi-factor authentication (MFA) since 2017. This project expands Duo protection to students, student employees, faculty emeriti, retirees and guest accounts by spring 2025. This means everyone with a TU NetID will use Duo when accessing protected TU services.

Project Timeline

2024

  • spring: project planning, soft communications 
  • summer: project planning, technical work 
  • July 22: newly admitted students use Duo, returning student  and retiree opt in begins at towson.edu/netid. Compromised accounts will be automatically enrolled in and required to use Duo.
  • fall: campus communications, outreach. Continued student and retiree opt in at towson.edu/netid, and auto-enrollment of compromised accounts.
  • Oct. 8: newly created individual guest NetIDs use Duo.

2025

  • Jan. 13: Phone call option retires (using a phone call to authenticate is no longer an option for faculty/staff).
  • Feb 4.: all retirees, faculty emeriti and individual guest NetID accounts will be auto-enrolled in and use Duo. See next steps. 
  • Feb. 11: student employees will be auto-enrolled in and use Duo. See next steps. 
  • Feb. 18 through April: all remaining students will be auto-enrolled in small groups by TU. See next steps. 
  • spring: Duo MFA required for all NetID holders. 

About Duo

Duo is a security method that requires a second (“multi”) form of identification to help you securely log into systems the university wants to strongly protect. This proves you initiated the login by providing a randomized, automatically generated number that authenticates you for a single login session. Even if a criminal manages to steal your password, they won’t be able to access your data, thanks to Duo.

How Duo works

Logging in using multi-factor authentication requires something you know (like your TU NetID and password) and something you have (like Duo app or texted codes). The easiest way to authenticate is to use the Duo app on your phone. There are back-up options if you don’t have your phone, like pre-printed passcodes. 

Key Benefits

Expanding Duo MFA to all NetID holders will:

  • reduce risk of phishing attacks and compromised accounts, in turn reducing potential security breaches of university and individual data.
  • improve TU’s security standards to match other higher ed institutions and private corporations.
  • address compliance, University System of Maryland (USM) security requirements and Maryland Office of Legislative Audits (OLA).

Info for Students

All students will use Duo by mid-spring 2025, but you can opt in now to get the added layer of protection for your TU account.

  • Newly admitted students use Duo.
  • All returning TU students can opt in now at towson.edu/netid. See instructions for enrolling in Duo.
  • All TU students who haven’t opted in by February 17 will be auto-enrolled in Duo small groups by TU starting on Feb. 18. Once enrolled, you'll need to configure your accounts at towson.edu/netid. 

Info for Faculty

Students using Duo on a mobile device or with pre-printed passcodes should only add 5-10 seconds to classroom time. If students don’t use technology (laptops, etc.) that require logins, they won’t need to authenticate with Duo. Additionally, Duo isn’t an excuse for students to use their smartphones throughout class. Here are some resources to help with Duo use in the classroom:

Duo MFA in class/Once enrolled 

  • Be prepared to log into Duo MFA to access class activities (i.e., exams, quizzes) and apps like your Microsoft account, or potentially risk losing points.
  • Set a backup plan at towson.edu/netid in case your primary device is unavailable. Failure to have your MFA device or a backup (lost, was stolen, dead battery, etc.) or printed codes is not an excused absence or a valid reason for make-up work.
  • Limit use of devices in class: use your mobile device to authenticate/login, then put it away during class.

Printable PDF version.

Students should use pre-printed passcodes.  In your syllabus or at the start of the semester, you can ask students to print these out and bring them to every class. If the student has set up their security questions in advance, they can request a temporary passcode online at towson.edu/netid, or they can call the OTS Tech Support Desk at 410-704-5151 to verify their identity and receive a temporary one-time passcode. Students with the pre-printed codes might avoid lost quiz/exam time.

If the student is using their own device and checked the “Remember Me” option, they might be able to restart their computer and re-authenticate with their NetID/password without being prompted for Duo (i.e., not need to use their smart device).

If the student did not click the “Remember Me” box, is using a shared device, or their browser settings weren’t saved, they’ll need to log back in with their NetID/password and authenticate with MFA-Duo which will require briefly using their smartphone or token/fob. Use of a proctor assisting with this process is recommended during testing time.

If you have a specific need, please reach out to us through TechHelp, so we can talk about options and potential solutions.

Info for Retirees, Faculty Emeriti and Guests

General Project FAQs

Almost all of TU’s systems are protected by Duo. Single-Sign On (SSO) helps reduce the number of times you need to log in — but it is required when prompted.

Use the Duo Mobile app (available for smartphones or tablets) to generate passcodes even if you don't have an Internet, a Wi-Fi or a cellular connection. See the TechHelp Knowledge Base article for more info on using Duo.

No smartphone, no problem. You can use the Duo mobile app on a tablet, receive codes to a phone that can use text SMS, use your own security key or pre-printed passcodes.

It’s strongly recommended that you enroll multiple devices when registering for Duo so you can have a backup ready.

The best way to use Duo when abroad is by using the Duo Mobile App. It can be used as passcode generator, not requiring cell, data, or wireless service.

The Duo mobile app also supports more than a dozen languages and will auto-default to your device's language. For more info, see Duo's help article on using a mobile passcode.

Support

See general Duo FAQs, get an overview of how Duo works, learn about other Duo authentication methods. See all Duo self-help articles, including enrolling, installing and setting up on mobile devices, in the TechHelp Knowledge Base.  

Questions? Submit a TechHelp service request. Learn more about Duo at towson.edu/duo. 

News