Here's how to enroll in Duo
Enrolling in Duo Multi-Factor Authentication (MFA) takes less than three minutes,
and it's set up through the .
TU faculty and staff have used Duo multi-factor authentication (MFA) since 2017. This
project expands Duo protection to students, student employees, faculty emeriti, retirees
and guest accounts by spring 2025. This means everyone with a TU NetID will use Duo
when accessing protected TU services.
Project Timeline
2024
- spring: project planning, soft communications
- summer: project planning, technical work
- July 22: newly admitted students use Duo, returning student and retiree opt in begins at
towson.edu/netid. Compromised accounts will be automatically enrolled in and required
to use Duo.
- fall: campus communications, outreach. Continued student and retiree opt in at towson.edu/netid,
and auto-enrollment of compromised accounts.
- Oct. 8: newly created use Duo.
2025
- Jan. 13: Phone call option retires (using a phone call to authenticate is no longer an option
for faculty/staff).
- Feb 4.: all retirees, faculty emeriti and guest NetID accounts will be auto-enrolled in and
use Duo.
- Feb. 11 through April: all remaining students will be auto-enrolled in small groups by TU and will need
to configure their accounts at towson.edu/netid. Specific timing to be communicated
in advance.
- spring: Duo MFA enrollment is required for all NetID holders.
About Duo
Duo is a security method that requires a second (“multi”) form of identification to help
you securely log into systems the university wants to strongly protect. This proves
you initiated the login by providing a randomized, automatically generated number
that authenticates you for a single login session. Even if a criminal manages to steal
your password, they won’t be able to access your data, thanks to Duo.
How Duo works
Logging in using multi-factor authentication requires something you know (like your
TU NetID and password) and something you have (like Duo app or texted codes). The
easiest way to authenticate is to use the Duo app on your phone. There are back-up
options if you don’t have your phone, like .
Key Benefits
Expanding Duo MFA to all NetID holders will:
- reduce risk of phishing attacks and compromised accounts, in turn reducing potential security
breaches of university and individual data.
- improve TU’s security standards to match other higher ed institutions and private corporations.
- address compliance, University System of Maryland (USM) security requirements and Maryland Office of
Legislative Audits (OLA).
Info for Students
All students will use Duo by mid-spring 2025, but can to get the added layer of protection for their TU accounts.
- Newly admitted students use Duo.
- All returning TU students can opt in now at towson.edu/netid. See .
- All TU students who haven’t opted in by February will be auto-enrolled in Duo small groups by TU starting on Feb. 11. Specific timing to be communicated in advance. Once enrolled, you'll need to configure
your accounts at towson.edu/netid.
Info for Faculty
Faculty already use Duo. Students using Duo on a mobile device or with should only add 5-10 seconds to classroom time. If students don’t use technology
(laptops, etc.) that require logins, they won’t need to authenticate with Duo. Additionally,
Duo isn’t an excuse for students to use their smartphones throughout class. Here are
some resources to help with Duo use in the classroom:
Set expectations: Syllabi text for copy and pasting
Duo MFA in class/Once enrolled
- Be prepared to log into Duo MFA to access class activities (i.e., exams, quizzes)
and apps like your Microsoft account, or potentially risk losing points.
- Set a backup plan at towson.edu/netid in case your primary device is unavailable.
Failure to have your MFA device or a backup (lost, was stolen, dead battery, etc.)
or printed codes is not an excused absence or a valid reason for make-up work.
- Limit use of devices in class: use your mobile device to authenticate/login, then
put it away during class.
Printable PDF version.
Classroom scenario: My students take online quizzes and exams during class, and someone
forgot their smartphone or token/fob.
Students should use . In your syllabus or at the start of the semester, you can ask students to print
these out and bring them to every class. If the student has set up their security
questions in advance, they can request a temporary passcode online at towson.edu/netid,
or they can call the OTS Tech Support Desk at 410-704-5151 to verify their identity
and receive a temporary one-time passcode. Students with the pre-printed codes might
avoid lost quiz/exam time.
Classroom scenario: My students take online quizzes and exams during class, and their
computer crashed in the middle of the exam.
If the student is using their own device and checked the “Remember Me” option, they
might be able to restart their computer and re-authenticate with their NetID/password
without being prompted for Duo (i.e., not need to use their smart device).
If the student did not click the “Remember Me” box, is using a shared device, or their
browser settings weren’t saved, they’ll need to log back in with their NetID/password
and authenticate with MFA-Duo which will require briefly using their smartphone or
token/fob. Use of a proctor assisting with this process is recommended during testing
time.
Classroom scenario: I have a special testing or lab situation. What are the options
regarding Duo?
If you have a specific need, please reach out to us through , so we can talk about options and potential solutions.
Info for Retirees, Faculty Emeriti and Guests
- New retirees (as of May 2024) use Duo now.
- All retirees and faculty emeriti can opt in now at towson.edu/netid. See .
- All retirees and faculty emeriti who haven’t opted in will be auto enrolled in Duoon Feb. 4.
- Shared guest and service guest accounts can be activated now . Newly created use Duo.
General Project FAQs
Which TU systems require Duo? And will I have to use Duo every time I login?
Almost all of TU’s systems are protected by Duo. helps reduce the number of times you need to log in — but it is required when prompted.
What if I don’t own a smartphone or if I don’t have it with me?
No smartphone, no problem. You can use the Duo mobile app on a tablet, receive codes
to a phone that can use text SMS, use your own security key or .
It’s strongly recommended that you enroll multiple devices when registering for Duo
so you can have a backup ready.
How I can use Duo internationally?
The best way to use Duo when abroad is by using the Duo Mobile App. It can be used
as passcode generator, not requiring cell, data, or wireless service.
The Duo mobile app also supports more than a dozen languages and will auto-default
to your device's language. For more info, see .
Support
See , get an , learn about . See all Duo self-help articles, including enrolling, installing and setting up on
mobile devices, in the TechHelp Knowledge Base.
Questions? Submit a service request. Learn more about Duo at towson.edu/duo.
News