{"id":413,"date":"2016-11-01T09:00:13","date_gmt":"2016-11-01T13:00:13","guid":{"rendered":"https:\/\/michigan.it.umich.edu\/news\/?p=413"},"modified":"2024-07-08T06:06:46","modified_gmt":"2024-07-08T10:06:46","slug":"your-password-needs-a-partner-turn-on-two-factor-for-weblogin","status":"publish","type":"post","link":"https:\/\/michigan.it.umich.edu\/news\/2016\/11\/01\/your-password-needs-a-partner-turn-on-two-factor-for-weblogin\/","title":{"rendered":"Your password needs a partner: Turn on two-factor for Weblogin"},"content":{"rendered":"

Strong passwords are essential, but they are not enough anymore. In a recent University Record<\/em> interview on cyber security at U-M<\/a>, Chief Information Security Officer Don Welch noted that \u201chigher education has the highest number of IT security breaches among most industry sectors.\u201d Your password needs a partner\u2014two-factor authentication.\"\"<\/p>\n

Now the U-M community has a great tool to protect personal information by using two-factor authentication from Duo Security. In October, U-M added the option to use Duo when logging into services via the Weblogin page<\/a>. When you turn on two-factor for Weblogin, you add an extra layer of security to your personal information in Wolverine Access, U-M Google, and more\u2014including your W-2s, direct deposit info, and your U-M Google email.<\/p>\n

Protection \u201cworth a few more clicks\u201d<\/h2>\n

Denise Stegall, senior director for records and information services in University Human Resources, turned on two-factor for Weblogin during the August pilot and endorsed the service: \u201cAs one of the HR data stewards, I am aware of many examples of identify fraud. Knowing that I can add a layer of protection to most of my work systems to reduce opportunities for hacking [and] fraud to protect all U-M employees is worth a few more clicks a day using two-factor authentication!\u201d<\/p>\n

This fall, the Your Password Needs a Partner: Turn on Two-factor<\/em> campaign will encourage faculty and staff to turn on two-factor for Weblogin through articles, outreach and education, and awareness materials. Efforts to expand two-factor authentication to new U-M services and individuals on all campuses will continue over the next year. If you would like to promote the Your Password Needs a Partner: Turn on Two-Factor<\/em> effort in your unit, please contact the project team<\/a>.<\/p>\n

Currently, more than 23,000 individuals use Duo to access U-M systems that require it. Now that Weblogin with Duo is available to the entire U-M community, the university is counting on IT leaders like you to help promote its use and safeguard personal or university data. Be a Duo champion: turn on two-factor for Weblogin<\/a> and then show your colleagues how easy it is to use.<\/strong><\/p>\n

<\/i><\/div><\/div>
What is two-factor authentication?<\/div>Two-factor authentication combines a password (something you know) with a second factor, like a passcode or push notification sent to your phone (something you have). U-M uses Duo Security.<\/p>\n

How do I turn it on?<\/strong><\/p>\n

You first need to enroll in Duo<\/a> if you haven\u2019t already. Then you can turn on two-factor for Weblogin at UMICH Account Management<\/a> under the \u201cTwo-Factor (Duo)\u201d tab. Click the “Turn on Two-Factor” button, then set the switch to “On.” You can also turn on two-factor from the UMHS profile page. Learn more about Two-Factor Authentication at U-M<\/a> and the Turn On Two-factor for Weblogin<\/a> option.<\/p>\n

Tips from two-factor champions<\/strong><\/p>\n