Content Comparison

Image Added

Image Added

•  Many users choose weak passwords which can be easily guessed or cracked
• Phishing attacks successfully trick people into revealing passwords
• Viruses/malware can capture passwords and send them over the network where they can be collected
• Users on unsecured networks, for example, at the mall can have their passwords sniffed

The main drawback of the username/password is that this combination is only a single piece of information that a malicious individual needs to obtain in order to compromise your account(s).

Two-factor authentication, as implemented at UMBC, adds an extra layer of security to your login procedure by requiring you to have in your possession something physical unique to you. At UMBC that physical object can be either your cell phone, your office phone, or even a tablet.

UMBC has partnered with Duo Security to provide the infrastructure for two-factor authentication.

For more information on two-factor authentication as provided by Duo Security, go to http://guide.duosecurity.com

How do I get started using Duo?

Getting started is easy.  You will just click a button to enroll, optionally install the Duo app on your mobile device, and then be guided through the final enrollment steps the first time logging in to WebAuth. 

• How do I activate Duo for my UMBC account?
• Once Duo is active, how do I enroll myself?
• I replaced or reset my mobile device. What do I do now?

second layer of security to your online accounts. Verifying your identity using an additional factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.

This additional factor of authentication is separate and independent from your username and password — Duo never sees your password.

How It Works

Image Added

1. Enter username and password as usual

2. Use your phone to verify your identity

3. Securely log in

Why do I need this?

Passwords are surprisingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. Multi-factor authentication helps keep your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.

News

Iframe
scrolling no src //rss.bloople.net/?url=https%3A%2F%2Fmy3.my.umbc.edu%2Fgroups%2Fdoit%2Fposts.rss%3Ftag%3Dduo&detail=-1&limit=5&showtitle=false&type=html frameborder hide height 350