Duo 2FA - What is Duo Two Factor Authentication?
This document will explain what Two Factor Authentication is and why UW-Madison has selected Duo to provide our Two Factor Authentication service.
What is Two-Factor Authentication (2FA)?
Two-factor authentication (2FA) strengthens access security by requiring two methods (also referred to as factors) to verify your identity. These factors can include something you know - like a username and password, plus something you have - like a smartphone app to approve authentication requests.
2FA protects against phishing, social engineering and password brute-force attacks and secures your logins from attackers exploiting weak or stolen credentials.
Why is UW-Madison adopting Two-Factor Authentication (2FA)?
Two-factor authentication (2FA) is one of the best ways to protect against remote attacks such as phishing, credential exploitation and other attempts to takeover your accounts.Without your physical device, remote attackers can’t pretend to be you in order to gain unauthorized access to corporate networks, cloud storage, financial information, etc. stored in applications.
2FA prevents devastating and costly breaches. Recent breaches resulting from compromised credentials include government agencies like the Federal Office of Personnel Management and higher education institutions like the University of Maryland, where a cleanup effort cost over $6.2M in credit monitoring alone. University of Central Florida also suffered a loss of 60,000 identities. 2FA also reduces UW-Madison’s risk exposure. 2FA increases credential security across IT systems that use a username and password, including NetID. 2FA will prevent us from having the same risk exposure as companies that were breached. Additionally, UW System Administrative Policies 1030 and 1031 mandate that we implement a multi-factor authentication system.
Why did UW-Madison select Duo for Two-Factor Authentication (2FA) implimentation?
An RFP was concluded in 2017, with industry-standard Duo Security being selected. Other higher-education institutions Duo serves include Harvard, Michigan, Villanova, Syracuse, University of South Florida and more. Duo has worked well for these institutions.
- UW-Madison's Duo Two-Factor Authentication Project page
- Duo Security's website
- Duo Two-Factor Authentication Project feedback form