| Table of Contents |
|---|
|
What is Multi-Factor Authentication (MFA)? |
What is Multi-Factor Authentication (MFA)?
Authentication is the process a system uses to verify that you are who you claim to be. It can rely on one or more of the following factors:
- Something you know — such as a password.
- Something you have — such as your mobile phone.
- Something you are — such as a fingerprint (biometrics).
Multi-factor authentication (MFA) requires two or more of these factors. Even if your password is stolen or guessed, an attacker still cannot access your account without your second factor — such as your phone.
Why Does UT Require MFA?
The University of Texas at Austin uses Duo, a multi-factor authentication service, to protect university accounts and systems. When you sign in to any UT web application protected by MFA, Duo will prompt you to verify your identity after you enter your UT EID and password.
This extra step helps protect your personal information, university data, and the broader campus community from unauthorized access.
Enroll Your First Device
Before you can use MFA, you must enroll at least one device. The recommended option is a smartphone or tablet with the Duo Mobile app installed. Don't have a smartphone? You can also enroll a landline, a hardware token, or another supported device. See Available Authentication Methods for all options.
Have your device on hand before you begin.
To enroll your device:
- Go to the Self-Registration Portal at mfa.login.utexas.edu.
- Sign in with your UT EID and password.
- Select Next to begin setup. After a brief data safety overview, you will be prompted to choose an authentication method.
- Follow the on-screen prompts for your chosen method:
- Duo Mobile: Download the Duo Mobile app from your device's app store when prompted. Open the app, tap + Add, and scan the QR code displayed on your screen.
- Phone Number: Select your country code, enter your phone number, and confirm it is correct. Select Add phone number to complete setup.
- A confirmation screen will appear when your device is successfully enrolled.
For detailed, illustrated enrollment instructions, see the Duo Universal Prompt Enrollment Guide.
Add a Backup Device
The university strongly recommends enrolling at least two devices. A backup device protects your access if your primary device is ever lost, stolen, broken, or reset to factory settings. With a backup device enrolled, you can remove the unavailable device and add a new one on your own — without contacting support.
Important: If you have only one enrolled device and it becomes unavailable, you will need to contact the Enterprise Technology (ET) Support Center at 512-475-9400 or help@utexas.edu to regain access.
To add a backup device or manage your enrolled devices, visit the Device Management Knowledge Article.
Available Authentication Methods
Duo supports several authentication methods. Not all options require a smartphone — see below to find what works best for you.
| Method | Description |
| Verified Duo Push |
Sends a push notification to the Duo Mobile app on your phone or tablet. Enter the code shown on your computer screen into the Duo Mobile app to approve the login. This is the recommended method for smartphone users. For device requirements and step-by-step instructions, see the Duo User Guide for Android or iOS. |
| Duo Mobile Passcode |
Generates a one-time passcode in the Duo Mobile app — works even without an internet connection. At the Duo prompt, select Enter a Passcode, then enter the code shown in the app. Hardware token users may also use this option. |
| Security Key |
A physical USB security key that authenticates with the touch of a button — no passcode required. One example is the YubiKey, made by Yubico. See yubico.com for product details. Security keys configured for UT's MFA service are available at the Campus Computer Store. Note: Security keys purchased from the Campus Computer Store are configured for UT's MFA service and are not compatible with the YubiCloud OTP validation infrastructure. |
| Hardware Token |
A small portable device that generates one-time passcodes. A good option if you prefer not to use a smartphone. Hardware tokens configured for UT's MFA service are available at the Campus Computer Store (product ID #1867833). |
| Touch ID |
Authenticate using the fingerprint sensor on a Touch ID-equipped MacBook Pro or MacBook Air. Requires a fingerprint enrolled in macOS Touch ID settings and a supported web browser. For current browser requirements and registration steps, see the Duo User Guide: Touch ID and the UT Device Management Knowledge Article. |
| Phone Call or Text |
Duo calls or texts your registered phone number. Approve the login by following the phone prompt or entering the texted passcode. Works with any phone capable of receiving calls or texts — no smartphone required. |
Duo Help Videos
Enterprise Technology has produced the following videos to help you get started with Duo. Closed captioning is available via the [CC] button on each player.
Note: Do not use the comments box below to request technical support. Contact the ET Support Center for assistance at 512-475-9400 or help@utexas.edu.