Announcing Duo Two-Factor Authentication

In order to improve our security posture, NJIT is announcing Duo Two-factor Authentication (2FA), which is a way to add a second layer of security to most NJIT online services.

IST is currently testing this service. During this testing, you may notice slight changes when logging in to NJIT services such as Webmail, Canvas, and Highlander Pipeline. After logging in, you may see a brief delay or a progress wheel flash on your screen. IST will rollout Duo over the course of 2022-2023.  You do not need to take any action at this time. Additional announcements will be provided to the community throughout the spring and summer. If you have any questions about Duo, please contact the IST Service Desk.

What is two-factor authentication?

All of us currently use passwords to authenticate to NJIT services. Two-factor authentication provides a second layer of security to your account with additional verification using a trusted device. This device can be a smartphone running the Duo app, a text message, an NJIT provided key fob (for faculty/staff), or even a desk phone.

Two-factor authentication is a critical part of our strategy to strengthen NJIT's defenses against cyber attacks.

• Universities around the world, including the NJIT, are high-priority targets for hackers. 
• Stolen NJIT credentials can be leveraged to gain unauthorized access to personal information, research data, and intellectual property.
• Two-factor authentication prevents almost 100% of attacks based on credential theft.
• Two-factor authentication allows you to protect your account from wherever you are located.

Why do we need two-factor authentication?

Passwords can be hacked, stolen, or guessed. With Duo, even if someone has your password, they will not gain access to your NJIT account without access to your trusted device. Duo provides a more secure computing environment for NJIT and aligns with industry standards and best practices.

Where will I use Duo at NJIT?

Examples of services that will be protected by Duo are:

• Remote Access by VPN
• Remote Desktop Access
• Canvas
• Banner
• Webmail
• Pipeline

Additional services will be protected by two-factor authentication in the future as they are added.

Thank you for your support as we launch Duo. We look forward to taking this step forward together.