Duo for Students, Retirees & Guests

 Here's how to enroll in Duo

Enrolling in Duo Multi-Factor Authentication (MFA) takes less than three minutes, and it's set up through the .  

TU faculty and staff have used Duo multi-factor authentication (MFA) since 2017. This project expands Duo protection to students, student employees, faculty emeriti, retirees and guest accounts by spring 2025. This means everyone with a TU NetID will use Duo when accessing protected TU services.

Project Timeline

2024

  • spring: project planning, soft communications 
  • summer: project planning, technical work 
  • July 22: newly admitted students use Duo, returning student  and retiree opt in begins at towson.edu/netid. Compromised accounts will be automatically enrolled in and required to use Duo.
  • fall: campus communications, outreach. Continued student and retiree opt in at towson.edu/netid, and auto-enrollment of compromised accounts.
  • Oct. 8: newly created use Duo.

2025

  • Jan. 13: Phone call option retires (using a phone call to authenticate is no longer an option for faculty/staff).
  • Feb 4.: all retirees, faculty emeriti and individual guest NetID accounts will be auto-enrolled in and use Duo. See  
  • Feb. 11: student employees will be auto-enrolled in and use Duo. See  
  • Feb. 18 through April: all remaining students will be auto-enrolled in small groups by TU. See  
  • spring: Duo MFA required for all NetID holders. 

About Duo

Duo is a security method that requires a second (鈥渕ulti鈥�) form of identification to help you securely log into systems the university wants to strongly protect. This proves you initiated the login by providing a randomized, automatically generated number that authenticates you for a single login session. Even if a criminal manages to steal your password, they won鈥檛 be able to access your data, thanks to Duo.

How Duo works

Logging in using multi-factor authentication requires something you know (like your TU NetID and password) and something you have (like Duo app or texted codes). The easiest way to authenticate is to use the Duo app on your phone. There are back-up options if you don鈥檛 have your phone, like . 

Key Benefits

Expanding Duo MFA to all NetID holders will:

  • reduce risk of phishing attacks and compromised accounts, in turn reducing potential security breaches of university and individual data.
  • improve TU鈥檚 security standards to match other higher ed institutions and private corporations.
  • address compliance, University System of Maryland (USM) security requirements and Maryland Office of Legislative Audits (OLA).

Info for Students

All students will use Duo by mid-spring 2025, but you can to get the added layer of protection for your TU account.

  • Newly admitted students use Duo.
  • All returning TU students can opt in now at towson.edu/netid. See .
  • All TU students who haven鈥檛 opted in by February 17 will be auto-enrolled in Duo small groups by TU starting on Feb. 18. Once enrolled, you'll need to configure your accounts at towson.edu/netid. 

Info for Faculty

Students using Duo on a mobile device or with should only add 5-10 seconds to classroom time. If students don鈥檛 use technology (laptops, etc.) that require logins, they won鈥檛 need to authenticate with Duo. Additionally, Duo isn鈥檛 an excuse for students to use their smartphones throughout class. Here are some resources to help with Duo use in the classroom:

Duo MFA in class/Once enrolled 

  • Be prepared to log into Duo MFA to access class activities (i.e., exams, quizzes) and apps like your Microsoft account, or potentially risk losing points.
  • Set a backup plan at towson.edu/netid in case your primary device is unavailable. Failure to have your MFA device or a backup (lost, was stolen, dead battery, etc.) or printed codes is not an excused absence or a valid reason for make-up work.
  • Limit use of devices in class: use your mobile device to authenticate/login, then put it away during class.

Printable PDF version.

Students should use .  In your syllabus or at the start of the semester, you can ask students to print these out and bring them to every class. If the student has set up their security questions in advance, they can request a temporary passcode online at towson.edu/netid, or they can call the OTS Tech Support Desk at 410-704-5151 to verify their identity and receive a temporary one-time passcode. Students with the pre-printed codes might avoid lost quiz/exam time.

If the student is using their own device and checked the 鈥淩emember Me鈥� option, they might be able to restart their computer and re-authenticate with their NetID/password without being prompted for Duo (i.e., not need to use their smart device).

If the student did not click the 鈥淩emember Me鈥� box, is using a shared device, or their browser settings weren鈥檛 saved, they鈥檒l need to log back in with their NetID/password and authenticate with MFA-Duo which will require briefly using their smartphone or token/fob. Use of a proctor assisting with this process is recommended during testing time.

If you have a specific need, please reach out to us through , so we can talk about options and potential solutions.

Info for Retirees, Faculty Emeriti and Guests

  • New retirees (as of May 2024) use Duo now.
  • All retirees and faculty emeriti can opt in now-Feb. 3 at towson.edu/netid. See . Retirees and faculty emeriti who haven鈥檛 opted in will be auto enrolled in Duo on Feb. 4. 
  • Shared guest and service guest accounts can be activated now . Newly created use Duo.

General Project FAQs

Almost all of TU鈥檚 systems are protected by Duo. helps reduce the number of times you need to log in 鈥� but it is required when prompted.

Use the Duo Mobile app (available for smartphones or tablets) to generate passcodes even if you don't have an Internet, a Wi-Fi or a cellular connection. See the for more info on using Duo.

No smartphone, no problem. You can use the Duo mobile app on a tablet, receive codes to a phone that can use text SMS, use your own security key or .

It鈥檚 strongly recommended that you enroll multiple devices when registering for Duo so you can have a backup ready.

The best way to use Duo when abroad is by using the Duo Mobile App. It can be used as passcode generator, not requiring cell, data, or wireless service.

The Duo mobile app also supports more than a dozen languages and will auto-default to your device's language. For more info, see .

Support

See , get an , learn about . See all Duo self-help articles, including enrolling, installing and setting up on mobile devices, in the TechHelp Knowledge Base.  

Questions? Submit a service request. Learn more about Duo at towson.edu/duo. 

News