Published November 18, 2019
Two-step verification, powered by Duo, is available now to add extra security to your UBITName account. It will be required for all UB faculty and staff beginning February 25, 2020.
When you set it up, you’ll be asked to select at least one option for verifying your login. Adding multiple options is highly recommended, in case you ever find yourself without access to your main second-step option when logging in.
Luckily, everyone at UB has several options for how they log into their account with two-step verification. Setting up additional two-step options is easy, and can be done any time from the Duo Two-Step Verification Manager.
Here are five easy options you can choose for your UBITName accounts, to make sure you can log in when you need to.
Available for phones and tablets, the Duo Mobile app for iOS/Android is the recommended option and by far the easiest method for a second-step. Duo Mobile actually provides two options in one.
You can request a Duo Push, which sends a notification to your device, allowing approval of the login without leaving your notification screen. If your device is in hand, the whole process of verifying your login with a Duo Push takes seconds.
You can also use the Duo Mobile app to generate one-time-use passcodes you can use anywhere—no Wi-Fi, mobile data or carrier service required. Just click Enter a Passcode on the Duo panel when logging in.
UB faculty and staff can also register a phone number (referred to by Duo as a landline phone), such as your UB phone or cell phone, to authenticate.
Once you enroll in Duo using a landline option, or add a landline as an additional device after enrolling, you can select Call Me as an option for verification when logging in. When you click the button, the registered phone will ring. Answer the call, and press 1 when prompted.
At your request, UB can provide you with a standalone hardware token that generates a temporary, one-time passcode for Duo verification.
When you log in and are prompted for verification, select Enter a Passcode. Press the button on your hardware token to generate a new passcode and enter it in the space provided before the passcode expires (you can see how much time is left on your hardware token). Then, press Log In.
The Duo Two-Step Verification Manager can generate ten backup codes for you to print out and use in place of another two-step option.
Generating and printing these codes only takes a minute, and is well worth it if you’re ever without your other two-step options. By printing these codes and keeping them in your purse, wallet or backpack, you’ll have a way to securely access your account at all times.
Printed passcodes from the Duo Two-Step Verification Manager can be used in any order. However, when you generate new codes using this method, any old codes you generated are automatically invalidated.
Duo supports most popular USB security keys, including YubiKey and Google Titan. If you’re already using a USB security key for other accounts, you can visit the Duo Two-Step Verification Manager and add it as a second-step for your UBITName account too.
USB security keys are easy to set up and use. Once enrolled, there’s no software to install—as long as you’re on a supported browser, just plug the key into your computer and push the button when prompted, and you’re in.
Contact the UBIT Help Center for help related to your UBITName account, online at buffalo.edu/ubit/help. Or, call 716-645-3542, or stop by our Help Center walk-up locations on North and South Campus.