Duo for Students, Retirees & Guests

Everyone with a NetID now uses Duo!

Status: complete. Everyone at TU, including all 18,000+ students, use Duo.

Recommendations: Enroll two devices (a main device and a backup) and pre-print codes in case you forget your phone/device or the battery dies. 

Need help? Here are the steps and instructions using Duo. If you need a passcode, call the Tech Support Desk at 410-704-5151.

TU faculty and staff have used Duo multi-factor authentication (MFA) since 2017. This project expanded Duo protection to students, student employees, faculty emeriti, retirees and guest accounts, meaning everyone with a TU NetID now uses Duo when accessing protected TU services.

Project Timeline

2024

  • spring: project planning, soft communications 
  • summer: project planning, technical work 
  • July 22: newly admitted students use Duo, returning student and retiree opt in begins at towson.edu/netid. Compromised accounts will be automatically enrolled in and required to use Duo.
  • fall: campus communications, outreach. Continued student and retiree opt in at towson.edu/netid, and auto-enrollment of compromised accounts.
  • Oct. 8: newly created individual guest NetIDs use Duo.

2025

  • Jan. 13: Phone call option retires (using a phone call to authenticate is no longer an option for faculty/staff).
  • Feb 4.: all retirees, faculty emeriti and individual guest NetID accounts auto-enrolled in and use Duo. 
  • Feb. 11: student employees auto-enrolled in and use Duo. See next steps. 
  • Feb. 18-April: all remaining students auto-enrolled at some point during the six-week rollout. See next steps. 
  • April 1: Duo MFA now required for all NetID holders. 

About Duo

Duo is a security method that requires a second (“multi”) form of identification to help you securely log into systems the university wants to strongly protect. This proves you initiated the login by providing a randomized, automatically generated number that authenticates you for a single login session. Even if a criminal manages to steal your password, they won’t be able to access your data, thanks to Duo.

How Duo works

Logging in using multi-factor authentication requires something you know (like your TU NetID and password) and something you have (like Duo app or texted codes). The easiest way to authenticate is to use the Duo app on your phone. There are back-up options if you don’t have your phone, like pre-printed passcodes. 

Key Benefits

Expanding Duo MFA to all NetID holders:

  • reduces risk of phishing attacks and compromised accounts, in turn reducing potential security breaches of university and individual data.
  • improves TU’s security standards to match other higher ed institutions and private corporations.
  • addresses compliance, University System of Maryland (USM) security requirements and Maryland Office of Legislative Audits (OLA).

Info for Faculty

Students using Duo on a mobile device or with pre-printed passcodes (bypass codes) should only add 5-10 seconds to classroom time. If students don’t use technology (laptops, etc.) that require logins, they won’t need to authenticate with Duo. Additionally, Duo isn’t an excuse for students to use their smartphones throughout class. 

Duo MFA in class/Once enrolled 

  • Be prepared to log into Duo MFA to access class activities (i.e., exams, quizzes) and apps like your Microsoft account, or potentially risk losing points.
  • Set a backup plan at towson.edu/netid in case your primary device is unavailable. Failure to have your MFA device or a backup (lost, was stolen, dead battery, etc.) or printed codes is not an excused absence or a valid reason for make-up work.
  • Limit use of devices in class: use your mobile device to authenticate/login, then put it away during class.

Printable PDF version.

Students should use pre-printed passcodes.  In your syllabus or at the start of the semester, you can ask students to print these out and bring them to every class. If the student has set up their security questions in advance, they can request a temporary passcode online at towson.edu/netid, or they can call the OTS Tech Support Desk at 410-704-5151 to verify their identity and receive a temporary one-time passcode. Students with the pre-printed codes might avoid lost quiz/exam time.

If the student is using their own device and checked the “Remember Me” option, they might be able to restart their computer and re-authenticate with their NetID/password without being prompted for Duo (i.e., not need to use their smart device).

If the student did not click the “Remember Me” box, is using a shared device, or their browser settings weren’t saved, they’ll need to log back in with their NetID/password and authenticate with MFA-Duo which will require briefly using their smartphone or token/fob. Use of a proctor assisting with this process is recommended during testing time.

If you have a specific need, please reach out to us through TechHelp, so we can talk about options and potential solutions.

General Project FAQs

Almost all of TU’s systems are protected by Duo. Single-Sign On (SSO) helps reduce the number of times you need to log in — but it is required when prompted.

Use the Duo Mobile app (available for smartphones or tablets) to generate passcodes even if you don't have an Internet, a Wi-Fi or a cellular connection. See the TechHelp Knowledge Base article for more info on using Duo.

No smartphone, no problem. You can use the Duo mobile app on a tablet, receive codes to a phone that can use text SMS, use your own security key or pre-printed passcodes.

It’s strongly recommended that you enroll multiple devices when registering for Duo so you can have a backup ready.

The best way to use Duo when abroad is by using the Duo Mobile App. It can be used as passcode generator, not requiring cell, data, or wireless service.

The Duo mobile app also supports more than a dozen languages and will auto-default to your device's language. For more info, see Duo's help article on using a mobile passcode.

Support

See general Duo FAQs, get an overview of how Duo works, learn about other Duo authentication methods. See all Duo self-help articles, including enrolling, installing and setting up on mobile devices, in the TechHelp Knowledge Base.  

Shared guest and service guest accounts can be activated now by request. Newly created individual guest NetIDs use Duo.

Questions? Submit a TechHelp service request. Learn more about Duo at towson.edu/duo. 

News & Announcements

2025

2024