This article describes what Two-factor Authentication (2FA) is, why the University of Waterloo uses it and how to get started to enrol in 2FA. For complete information about 2FA at UWaterloo, please review IST’s two-factor webpage: https://uwaterloo.ca/two-factor-authentication/.
Included in this article:
What is two-factor authentication?
Two-factor authentication (2FA), also known as multi-factor authentication, is the process of authenticating to an online service using something you know as the first factor (i.e. a password) and something you physically have as the second factor. Traditionally, the second authentication factor would be a physical fob or token, with the most popular form having a six-digit display.
Many central online services at the University of Waterloo require two-factor authentication for access. You will need to enrol in 2FA before being able to access these services.
Learn more at the university’s 2fa information page: uwaterloo.ca/2fa.
Why is Waterloo doing this?
Password-based attacks account for most of the cyber-attacks against the University. The COVID-19 pandemic has resulted in a dramatic increase in phishing attacks against UW, and because people frequently re-use passwords, breaches at other sites can still impact the University because of a related attack called “credential stuffing”. In short, the password alone is obsolete. Stronger authentication is required for services on the public Internet. See:
How to Enrol in 2FA
The preferred second-factor option is the Duo Mobile app
The app is available for iOS and Android devices, with or without cellular access
While an Internet connection is required for adding the device to a user’s Duo account, the app can be used to generate OTP codes even when cellular data or Wi-Fi networks are not available
The app is simple to register and use. It functions in various modes, with or without cellular data or Wi-Fi connection
Any Duo-protected application can be authenticated with the app. It is not necessary to disclose the phone number for a smartphone to use the app
Download the Duo Mobile app
Additional Resources for enrolling in 2FA
Second-factor Options
For alternative second-factor options please see Second factor selection criteria
Device Management
For information on device management, please see Duo device management instructions
Related articles
Need help?
Contact the IST Service Desk online or 519-888-4567 ext. 44357.
Article feedback
If you’d like to share any feedback about this article, please let us know.