Every time you log into an Amherst College service that uses the purple login screen (e.g., email, Moodle, etc.), you will get a second window that requires you to provide a second factor before you can log in. Most of the time, this second factor is tied to your moble phone or landline.
By checking the "Remember me for 7 days" box on the second-factor window, you can skip having to enter a second factor for a week.
Two-factor authentication (2FA) is required for all employees (faculty and staff) and all Amherst College students. New employees are given a grace period to pre-enroll before being required to enroll. New students who haven't pre-enrolled will be forced to enroll by the end of their first week of classes.
To pre-enroll, go to the AMHERST COLLEGE DUO ENROLLMENT PAGE. You'll need your phone and ID card.
Don't have a phone? Have an issue that prevents you from using 2FA? Fill out the Duo Exception Form.
Amherst College has activated two-factor authentication (2FA) using Duo Security. 2FA provides additional login security to College web services and also protects you if your account is compromised by a phishing attack. 2FA is mandatory for all current students and current employees, both faculty and staff. Alums, emeriti/retirees, Five College students, applicants, etc. should not--and in most cases cannot--enroll in Duo.
2FA is used on most Amherst College web-based services, including Moodle, Gmail and other Google apps, and the Amherst website, and on many Amherst third-party services such as Slate (Admission) and Handshake (Loeb Center). (In tech speak, 2FA is enabled on all college web services that are "shib-enabled;" i.e, the ones that use the purple login screen.) 2FA is not used for computer logins; it only protects logins to services hosted on websites.
Several older web-based systems--ACDATA in particular--are not compatible with Duo. As we replace these older systems with up-to-date ones such as Workday, the services they offer will automatically come under the Duo umbrella.
How it Works
Once you are enrolled in Duo, you'll see an extra login screen after you enter your Amherst username and password on a protected service. You'll then be promped to take a specific action to complete the login process. The action you take depends upon the devices you activate when you enroll in Duo. These include responding to a "push request" sent to your smartphone, responding to a phone call placed to your office phone, or entering an automatically-generated passcode. Once you've satisfied this "second factor," you'll be logged into the web service.
How to Pre-Enroll
Pre-enrolling only takes a few minutes. Here's what you will need at hand:
- a computer
- a phone--preferably a smartphone, but any phone will work, including a land line. You can also use an iOS or Android tablet or a USB security key
- your Amherst ID card
Note that if you have an iPhone or iPad, or an Android phone or tablet, it saves time if you install the Duo Mobile app from the Apple or Google store before you begin the enrollment process.
Access the Amherst College Duo Pre-Enrollment Page
Although Duo works all over the world, we suggest that you enroll while in the United States so the Help Desk can more easily provide support if you need it. If you will not be in the country before your enrollment deadline, please fill out the Duo Exception Form.
If you don't have access to a phone or other device required for 2FA, or for some other reason don't think you can use 2FA, please fill out the Duo Exception Form.
The following video is generic but nonetheless a good introduction of how you enroll a smartphone.
Help with Duo
If you stop by the Help Desk in Seeley Mudd any workday between 7:00 AM and 4:30 PM we will be happy to help you pre-enroll in Duo. Be sure to bring your phone and Amherst ID with you!
If you have any problems with self-enrollment or with using Duo, please contact AskIT.
How to Switch to a New Phone: You've replaced the smartphone that you previously used with Amherst 2FA. Here's how to get your new phone to work with Duo.
How to Enroll a Security Key: A security key is a small USB device that lets you satisfy 2FA requests with the press of a button. No phone required!
Duo Exception Form: Let us know about circumstances and concerns that may prevent you from using 2FA. Such circumstances could be temporary or permanent.
Frequently Asked Questions about 2FA at Amherst: Will Duo work while you're abroad? What happens if you forget your phone? Answers to these and many other questions.
What is 2FA?: A video from Duo explaining the rationale behind two-factory authentication.