How Do I Enroll in Two-Step Verification?

What is Two-Step Verification?

Two-Step Verification provides an added layer of protection when accessing PennKey-protected web sites and applications. After you log in with your PennKey and password, you'll use a device in your possession to verify your identity. With Two-Step, your data is protected, even if your PennKey password is compromised. Learn more about two-step verification.

As of Wednesday, October 31, 2018, all Penn faculty are required to use Two-Step Verification to access PennKey-protected web resources.

As of Thursday, February 14, 2019, all Penn students are required to use Two-Step Verification to access PennKey-protected web resources.

How do I enroll?

To enroll in Two-Step, visit:

CETS has prepared a step-by-step guide illustrating the enrollment process:

Two-Step Verification Enrollment (PDF)

Can I use Two-Step when I travel?

Being enrolled in Two-Step Verification will not interfere with your access, but please review these tips:

Two-Step Verification: Before you travel

How will Two-Step Verification affect classroom instruction?

This tip can be found in the Two Step Verification FAQ:

NOTE: Some classroom PCs at Penn allow a user's data to remain on the machine after logout. Other classroom PCs are configured to erase that data immediately upon user logout. Computers that erase all of a user's data on logout cannot make use of the 'Trust this browser' feature.

  • If you're teaching in a classroom where the PC allows user data to remain after logout (or if you teach using your own computer) you will only need to perform Two-Step Verification on that PC the first time you log in. After that, Two-Step will remain valid for you on that browser, as long as you use it to log into a PennKey-protected website at least once every 30 days.
  • In many of Penn's shared classrooms, the room PC is configured to erase each user's activity immediately after logoff from the machine. As a result, those PCs cannot use the 'Trust this Browser' feature. In those rooms, Two-Step will be required when lecturers sign in with their PennKey at the start of the class.
  • If you're teaching in a classroom with no Wi-Fi or cellular connectivity, you can still use Two-Step. The Duo app on your device can generate six-digit verification codes without a real-time Wi-Fi or cellular connection.
© Computing and Educational Technology Services