Turn on Multi-Factor Authentication when supported
Multi-factor authentication adds an additional verification step to your login flow so even if your password is compromised, you can reject account access to a bad actor.
ⓘ At NAU, we call Multi-Factor Authentication ‘Two-Step Verification’. You’ll see us reference MFA in tools like Duo Two-Step Verification, or the ‘enroll in Two-Step’ tool.
Having Multi-Factor Authentication enabled increases account security exponentially
MFA protects your account even if your password is compromised, giving you the ability to reject an access attempt if you don’t authorize a request.
Multi-Factor Authentication can be a variety of different methods
When paired with your password, MFA can be a number of different authentication types, ranging from a one-time pin or passcode to a physical USB stick that you enter into your device. Some of the most common types of MFA are;
- One-time passwords, pins, and codes.
- A push notification asking to allow access.
- Biometric data like fingerprints or Face ID.
- A physical USB security key, like a YubiKey or Titan Key.
ITS primarily requires NAU users to provide either a one-time code or accept a push notification request as the second half of our Two-Step Verification process with Duo.
Outside of your NAU account, some places you should enable MFA
- Banking
- Protect your financial data by enabling MFA on mobile apps or online banking logins.
- Email
- Having MFA enabled on your email accounts is key to preventing larger-scale security breaches.
- Social Media
- Enable MFA on social media accounts to protect your online identity.
- Online shopping accounts
- Like banking, be sure to protect any service with your financial information behind MFA.
Don’t let down your guard, even with MFA enabled
Even with MFA enabled, many attackers will still attempt to gain unauthorized access to your accounts by using social engineering tactics. For instance, some attackers will spam a user with MFA requests, hoping for the victim to approve one by accident.
ⓘ If you receive an unauthorized Duo prompt to your NAU account, immediately contact the ITS Service Desk and change your NAU password.
‹ Back to the 2025 Cybersecurity Awareness Month Overview
