Duo Two-Factor Authentication

Duo Two-Factor Authentication (2FA) is a security service that can be added to your SJSUone account to protect your account from attacks.

Who can use Duo 2FA?

The CSU has licensed Duo 2FA for all CSU employees. The Chancellor’s office is currently exploring extending this license to include students.

How does Duo 2FA work?

Two-Factor Authentication combines something you know (your username and password) with something you carry (your Apple or Android smartphone or a hardware token) to ensure that only you can log in to your SJSUone account. After entering your username and password you will be prompted to confirm your login, using your device.

SJSU encourages you to use your smartphone and the Duo Mobile app as your second factor. It's quicker, easier and more secure than using a hardware token. [pdf]

Duo 2FA for high-security Applications

Applications that grant access to sensitive data will require Duo 2FA. If you are required to use Duo 2FA in your job, you will be informed before the service is added to your application or account.

If you are required to use Duo 2FA, you will be given the option of using the Duo Mobile app on your existing Apple or Android smartphone, or being issued a hardware token (key fob) for use with Duo 2FA. You will receive instructions on what to do to be activated using Duo Mobile or to request a hardware token.

Register for Duo 2FA - ONLY Faculty & Staff

Faculty and staff (including Student Assistants) can register for Duo 2FA now, please complete form below. This is not currently available to students only.

After submitting this form, you will be contacted by the IT Service Desk for next steps.

Duo Method


Setting up Duo 2FA

If you choose to authenticate with a hardware token (key fob), you will be told when your hardware token can be picked up from the IT Service Desk, on the first floor of Clark Hall. After your hardware token has been issued to you, you will have to use it every time you log into a protected application.

If you choose to authenticate with Duo Mobile on your Apple or Android smartphone, the final set-up is a self-service process. You'll be told that your service has been activated. At your next web log in, a series of prompts will guide you through the Duo Mobile enrollment process.

How long does it take to get Duo 2FA?

Adding Duo 2FA on to your account can usually be processed the same day you make your request.

Additional Resources

Duo's Guide to Two-Factor Authentication. SJSU prefers the Duo Mobile App on iPhone/iPad and Android devices. We also supports hardware tokens. SJSU does not offer SMS (cellphone) or call-back (land-line) authentication.

Duo's YouTube Channel. Chock full of instructional videos on how to take advantage of Duo 2FA.


Using the smartphone app factor is covered by the CSU master license.

Hardware tokens (key fobs) are purchased by SJSU and provided to you. Replacements are available for broken or lost fobs.


Contact the IT Service Desk at 408-924-1530.

Because Duo 2FA is a security service, the IT Service Desk must confirm your identity before providing assistance.

Frequently Asked Questions