What is Two-Step Login?

Two-Step Login pairs something you know (your HawkID and password) with something you possess (usually a mobile phone). It prevents unauthorized users from accessing your accounts with stolen HawkID credentials.

Process illustration showing computer, mobile phone, and checkmark signifying login success

The University of Iowa uses Duo Security tools—including the Duo Mobile app—to manage the second step of the Two-Step Login process. With Duo Security, you can complete a Two-Step Login using any of these methods:

  • Responding to a push notification sent to the Duo Mobile app on your phone (the recommended method)
  • Entering a one-time passcode you generate in the Duo Mobile app or on a hardware token device
  • Entering a passcode from a list previously sent to your phone (or tablet) via text message or printed out and kept secure
  • Answering a phone call to a mobile or landline phone and following prompts to verify your login

You can choose your preferred method (and your preferred device, if have more than one enrolled) every time you log in.

Enrolling in Two-Step Login

Use Two-Step Login profile management tools (https://apps.its.uiowa.edu/uip-tools/two-step) to enroll new devices, establish backup methods, and enable applications. Find detailed instructions for adding devices and login methods below.

For security reasons, you can access profile management tools only from on-campus computers. To make changes from off-campus, call the ITS Help Desk at 319-384-4357.

ITS recommends using the Duo Mobile app on a mobile phone or tablet as your primary Two-Step Login method. We also recommend you enroll your home or office phone number as a backup device.

For this process, you’ll need a phone or tablet and an on-campus computer, both with internet access. (To enroll a device from off campus, call the ITS Help Desk at 319-384-4357.)

Part 1: Install Duo Mobile on your device

  1. Search for the free Duo Mobile app in your device’s app store.
  2. Download and install Duo Mobile.
  3. Keep your device handy to complete the process.

Part 2: Access your Two-Step Login profile

  1. Using an on-campus computer, go to https://apps.its.uiowa.edu/uip-tools/two-step.
  2. If setting up your profile for the first time, you’ll see a green “Setup Two-Step Authentication” button. Click it.
  3. If you’ve already set up your profile and are adding a new device, click “+ Add Additional Device.”
  4. Complete the “Default Phone Number” or “Add Device” form. (Which form you see will depend on whether you’re setting up your profile for the first time or adding a new device.) 

First-time setup screen

Add device screen
  • Enter a phone number if you choose. You don’t need a phone number if plan to use push notifications to the Duo Mobile app to complete your logins (the preferred method) or if your device does not have phone service.
  • Click the radio button labeled “Via the Duo Push application on available smart phones and tablets.”
  • Select the appropriate device platform from the drop-down list.
  • Assign a label or name for this device.
  1. If setting up a new profile, click the green “Send a test code and enable two-step authentication button. If adding a new device, click “Add Device.”
  2. A barcode and instructions will appear on your computer screen.

Part 3: Complete the process.

  1. Open the Duo Mobile app on your phone or tablet.
  2. On your device, tap the “+” symbol or “add account.”
  3. Tap “Scan Barcode” and use your device’s camera to scan the barcode on your computer screen.
  4. On your computer, click the “Verify Duo Push Activation” button.
  5. Look for a “Request waiting. Tap to respond.” prompt In the Duo Mobile app on your device.
  6. Tap the prompt, then tap the “Approve” button.

Your device is enrolled. Adjust any other profile settings (e.g., enable any opt-in applications) then log out of the Two-Step Login profile management site on your computer.

Note: If during the process you get the following error message, enter any possible 10-digit U.S. phone number in the enrollment form’s “Phone number box”:

Phone number error message

Entering a 10-digit number will let you bypass the error. The phone number will never be used so long as you click the form’s “Duo Push” radio button.

For this process, you’ll need a phone or tablet and an on-campus computer, both with internet access. (To update a device from off campus, call the ITS Help Desk at 319-384-4357.)

Part 1: Install Duo Mobile on your enrolled device

  1. Search for the free Duo Mobile app in your device’s app store.
  2. Download and install Duo Mobile.
  3. Keep your device handy to complete the process.

Part 2: Edit your device’s settings in your Two-Step Login profile

  1. Using an on-campus computer, go to https://apps.its.uiowa.edu/uip-tools/two-step.
  2. In the “Two-Step Devices” list, click the device you want to update (i.e., the device with Duo Mobile newly installed).
  3. An “Edit Device” window will open. Click the radio button labeled “Via the Duo Push application on available smart phones and tablets.”
  4. A “Duo Push Options” window will open. Click the blue “Enable Duo Push” button.
  5. A barcode and instructions will appear on your computer screen.

Part 3: Complete the process.

  1. Open the Duo Mobile app on your phone or tablet.
  2. On your device, tap the “+” symbol or “add account.”
  3. Tap “Scan Barcode” and use your device’s camera to scan the barcode on your computer screen.
  4. On your computer, click the “Verify Duo Push Activation” button.
  5. Look for a “Request waiting. Tap to respond.” prompt In the Duo Mobile app on your device.
  6. Tap the prompt, then tap the “Approve” button.

Your device now is set up for Duo Mobile push notifications. Adjust any other profile settings (e.g., enable any opt-in applications) then log out of the Two-Step Login profile management site on your computer.

For this process, you’ll need to be near the phone you want to enroll. You’ll also need an on-campus computer with internet access. (To update a device from off campus, call the ITS Help Desk at 319-384-4357.)

Note that you can only enroll a phone number that’s unique to you. If someone else has already enrolled the number, you won’t be able to add it.

Part 1: Enroll your phone number

  1. Using an on-campus computer, go to https://apps.its.uiowa.edu/uip-tools/two-step.
  2. Click “+ Add Additional Device.”
  3. An “Add Device” window will open. Enter the phone number you’re adding, click the “Voice Call” radio button, and enter a label or name for this phone number.
  4. Click the blue “Add Device” button. A verification window will open.

Part 2: Complete the process

  1. You’ll receive a verification call at the phone number you’ve added.
  2. Answer the call and make note of the one-time security code.
  3. On your computer, type the code in the verification window and click “Activate Two-Step Enrollment.”

Your backup phone number is enrolled. Adjust any other profile settings (e.g., enable any opt-in applications) then log out of the Two-Step Login profile management site on your computer.

For this process, you’ll need a phone or tablet and an on-campus computer, both with internet access. (To update a device from off campus, call the ITS Help Desk at 319-384-4357.)

Part 1: Enroll your mobile phone number

  1. Using an on-campus computer, go to https://apps.its.uiowa.edu/uip-tools/two-step.
  2. Click “+ Add Additional Device.”
  3. An “Add Device” window will open. Enter the phone number where you want to receive text messages, click the “Text message SMS” radio button, choose your device’s platform, and enter a label or name for the device.
  4. Click the blue “Add Device” button. A verification window will open.

Part 2: Complete the process

  1. Your device will receive a text message with a one-time security code. Keep this message until you’ve completed verification.
  2. On your computer, type the code in the verification window and click “Activate Two-Step Enrollment.”

Your phone number is set up to receive text messages. Adjust any other profile settings (e.g., enable any opt-in applications) then log out of the Two-Step Login profile management site on your computer.

Article number: 
106591
Last updated: 
May 31, 2017