{"id":869,"date":"2021-05-26T13:53:55","date_gmt":"2021-05-26T17:53:55","guid":{"rendered":"https:\/\/wp.biota.utoronto.ca\/?page_id=869"},"modified":"2026-07-22T11:50:29","modified_gmt":"2026-07-22T15:50:29","slug":"utormfa","status":"publish","type":"page","link":"https:\/\/wp.biota.utoronto.ca\/?page_id=869","title":{"rendered":"UTORMFA"},"content":{"rendered":"\n

To protect your University of Toronto accounts from compromise, please enrol in the Multi-Factor Authentication (MFA) service. Some services already require MFA in order to protect confidentiality, and increasingly it will become a requirement for routine access to your account. This protects your personal information, and the institutional data to which you have access.

What is MFA? It is a process that protects your account by requiring two identity factors to successfully log in. You have very likely already used some form of MFA (also called 2FA), such as when a company sends an SMS to your phone containing a one-time code that you enter to gain access to a service. This protects your account because a successful log in requires both the correct username + password and<\/em> a positive response to the authentication request sent to your personal device (phone or tablet).<\/p>\n\n\n\n

\n
\n
\"Duo<\/a><\/figure>\n\n\n\n

<\/p>\n<\/div>\n\n\n\n

\n

U of T has selected the Duo<\/strong> service to deliver this functionality. For most people, the most convenient option is to use your personal mobile phone with the Duo app installed. If you don’t have a mobile phone, or don’t want to use it as a Duo approval device, you can request a dedicated hardware token that you will carry with you any time you need access to your UofT account.<\/p>\n<\/div>\n<\/div>\n\n\n\n

To begin, visit this site and click on Self-Enrollment:
https:\/\/uoft.me\/mfa<\/a><\/strong><\/p>\n\n\n\n

You will start by installing the Duo Mobile<\/strong> app on your device. Please make sure you fully complete the process, about 10 minutes. Starting and abandoning enrollment could leave your account in an inaccessible state.
iPhone Apple App Store<\/strong> https:\/\/apps.apple.com\/ca\/app\/duo-mobile\/id422663827<\/a>
Android Google Play Store<\/strong> https:\/\/play.google.com\/store\/apps\/details?id=com.duosecurity.duomobile<\/a><\/p>\n\n\n\n

Your phone number is used only to identify the device and is not shared or otherwise used. At the end of the process, we recommend selecting the Push option: “When I log in: Automatically send this device a Duo Verified Push”<\/p>\n\n\n\n

Before<\/em> you lose your phone…<\/h2>\n\n\n\n

Once Duo Mobile is set up on your mobile device, there are two important steps to take to make sure you can always access your U of T account.<\/p>\n\n\n\n

Generate bypass codes<\/strong> that you can use for a one-time log in if you don’t have your device with you:
https:\/\/bypass.utormfa.utoronto.ca\/<\/a><\/p>\n\n\n\n

Enable Duo Restore<\/strong> so you can easily recover your profile when you replace your device.
iPhone\/iPad: https:\/\/guide.duo.com\/duo-restore#ios<\/a>
Android: https:\/\/guide.duo.com\/duo-restore#android<\/a><\/p>\n\n\n\n

QUESTIONS?<\/h2>\n\n\n\n

How does it work?<\/p>\n\n\n\n