How Do I Enroll in Two-Step Verification?

What is Two-Step Verification?

Two-Step Verification provides an added layer of protection when accessing web sites and applications. After you log in with your password, you'll use a device in your possession to verify your identity. With Two-Step, your data is protected, even if your password is compromised. CETS recommends that you enable Two-Step Verification (or two factor authentication, also known as 2FA) whenever it is an option.

This page provides instructions for enabling Two-Step Verification for your PennKey and Google@SEAS accounts.

How do I enroll my PennKey in Two-Step Verification?

All Penn faculty, staff and students are required to use Two-Step Verification to access PennKey-protected web resources and when using a PennKey password for SSH authentication on SEAS systems.

To enroll your PennKey in Two-Step and manage your settings, visit:

CETS has prepared a step-by-step guide illustrating the enrollment process:

See these articles for more information on PennKey Two-Step:

How will PennKey Two-Step Verification affect classroom instruction?

This tip can be found in the Two Step Verification FAQ:

NOTE: Some classroom PCs at Penn allow a user's data to remain on the machine after logout. Other classroom PCs are configured to erase that data immediately upon user logout. Computers that erase all of a user's data on logout cannot make use of the 'Trust this browser' feature.

  • If you're teaching in a classroom where the PC allows user data to remain after logout (or if you teach using your own computer) you will only need to perform Two-Step Verification on that PC the first time you log in. After that, Two-Step will remain valid for you on that browser, as long as you use it to log into a PennKey-protected website at least once every 30 days.
  • In many of Penn's shared classrooms, the room PC is configured to erase each user's activity immediately after logoff from the machine. As a result, those PCs cannot use the 'Trust this Browser' feature. In those rooms, Two-Step will be required when lecturers sign in with their PennKey at the start of the class.
  • If you're teaching in a classroom with no Wi-Fi or cellular connectivity, you can still use Two-Step. The Duo app on your device can generate six-digit verification codes without a real-time Wi-Fi or cellular connection.

How do I enroll my Google@SEAS account in Two-Step Verification?

Visit this page and click on the Get Started button to protect your account with 2-Step Verification:

Users may be notified by CETS or Google reminding them to enable Two-Step Verification before the enforcement deadline.

Do I need to enroll my Google@SEAS activity accounts in Two-Step Verification?

If you alone actively log into a Google@SEAS activity account, please configure Two-Step Verification for it. If you currently share activity account credentials with other users and would like to access the account's email or files without logging into it, please contact CETS for further assistance.

© Computing and Educational Technology Services