What is Multi-factor Authentication (MFA)?

Multi-factor authentication (MFA) strengthens access security by requiring multiple methods (also referred to as factors) to verify your identity. These factors can include something you know - like a username and password, plus something you have - like a smartphone app to approve authentication requests.

MFA protects against phishing, social engineering and password brute-force attacks and secures your logins from attackers exploiting weak or stolen credentials.

Why is UW-Madison adopting Multi-factor Authentication (MFA)?

Multi-factor authentication (MFA) is one of the best ways to protect against remote attacks such as phishing, credential exploitation and other attempts to takeover your accounts. Without your physical device, remote attackers cant pretend to be you in order to gain unauthorized access to corporate networks, cloud storage, financial information, etc. stored in applications.

MFA helps to reduce the risk of devastating and costly breaches. Recent breaches resulting from compromised credentials include government agencies like the Federal Office of Personnel Management and higher education institutions like the University of Maryland, where a cleanup effort cost over $6.2M in credit monitoring alone. University of Central Florida also suffered a loss of 60,000 identities. MFA also reduces UW-Madisons risk exposure. MFA increases credential security across IT systems that use a username and password, including NetID. MFA will prevent us from having the same risk exposure as companies that were breached. Additionally, UW System Administrative Policies 1030 and 1031 mandate that we implement a multi-factor authentication system.

Why did UW-Madison select Duo for Multi-factor Authentication (MFA)?

An RFP was concluded in 2017, with industry-standard Duo Security being selected. Other higher-education institutions Duo serves include Harvard, Michigan, Villanova, Syracuse, University of South Florida and more. Duo has worked well for these institutions.

Additional Resources:

• Duo Security's website
• Duo Multi-factor Authentication Project feedback form