There’s a continued uptick in cyber-attacks aimed at higher education, oftentimes targeting sensitive student data.

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account.

Multi-factor authentication adds a second layer of security by adding a verification step to OHIO logins, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away if someone is trying to log in as you.

This second factor of authentication is separate and independent from your username and password.

An unexpected request means that someone is trying to use your password to login to your account. You should press Deny and change your OHIO password immediately.

If you have Duo setup to automatically send you an authentication request as soon as you login, you will need to press cancel and then check mark the box to remember you for 30 days. At that time you can then select which authentication method you would like to use to login. If it is not setup to automatically send you an authentication request, then you should be able to check mark the box at the bottom before selecting which method you would like to use.

No, you can always adjust your settings even after selecting the "Remember me for 30 days" option. There are two ways to take care of this issue.

1. You may clear your browser cache which will force the browser to forget you have selected this option. If you need help with this, please contact the Service Desk.
2. You also can open the browser in a "New Incognito/Private Window"  and then login to one of the ohio.edu webpages.  Once duo authentication pops up, you will be able to edit settings. You may have to cancel the authentication request first if your Duo is setup to use your preferred device automatically.

If you are sure you are using the correct device, it may be an issue with network connectivity. Please try turning your WiFi off and then back on or, if you are currently using your cellular plans network, try turning airplane mode on and back off.

Please ensure the date/time on your device is set to automatically update. If this is set manually, the device will not communicate with Duo's servers and receive a notification.

If any of these methods don't work, please contact the Service Desk and they can send you a new activation link for your device.

Contact the Service Desk and they can remove your old phone number and device which will allow you to go through the enrollment process like it is your first device.

Contact the Service Desk and they can remove your old phone number and device. Once you have resolved your situation you will be able to enroll the device in Duo.

If you are using the Duo Mobile App, it will generate a passcode even without internet access. If you work for the University, you may speak with your department about getting a hardware token. If you would like to request a hardware token, please fill out the Token Request Form.

If you are in a situation where access to phones or electronic devices is limited, you can request a hardware token to authenticate. A hardware token is a keychain-sized device for generating passcodes even without internet access.

Initial tokens will be provided at no cost to the user. Lost, stolen, or damaged tokens will be replaced at cost by the user.

Please request a hardware token through this form: Token Request Form

If the hardware token is not generating a passcode, please contact the Service Desk to request a temporary passcode.

If the passcodes being generated are not being accepted during login, please contact the Service Desk as the hardware token has fallen out of sync. This most likely happened by accident if the device was stored near other objects and the button was pressed too many times.