Two-Factor Authentication

We'll be the first to tell you how important it is to have good, strong passwords. However, if an attacker manages to nab your password through brute-force hacking or phishing, there's one other defense you'll need to keep your accounts secure: two-factor authentication (or 2FA, as the cool kids call it). 2FA adds a second layer of protection by linking your account to something you own, like a mobile device, a dongle, or your fingerprint.

When you log in to a system that uses 2FA, you'll be prompted to use that "second factor"―whether it be a code sent to your phone, a push notification, or another system-specific action—to verify that it's really you. This second level of security makes it that much harder for a hacker to reach your account, while keeping the whole login process quick and easy for you. Like they say, "two authentication factors are better than one."

CES schools use Duo, or options associated with church account authentication including Okta Verify as 2FA services. With these applications enabled, you'll be prompted to verify your identity when logging in to your school account.

In order for 2FA to work properly, DO NOT give your sign-in credentials to anyone else and DO NOT approve any notifications you didn't initiate.

There are many companies that now encourage you to set up 2FA for personal accounts, like Facebook or your bank. Each site that offers 2FA will allow you to set it up in their security and login settings. Duo works most everywhere that 2FA can be enabled. Other reliable 2FA apps include Google Authenticator, Authy, Yubikey, Okta Verify, and LastPass (note that not all of these services are free).