Skip to Main Content

2-Step Verification with Duo Information Security

Support Page Content

Duo Resources

Sacramento State uses Duo two-factor authentication to protect your identity, prevent financial aid scams, and guarantee secure access to the campus services you log into every day – like Canvas, My Sac State, Microsoft 365, and your SacLink email to name a few.

Verifying your identity using a second factor (like your smart phone or other mobile device) prevents anyone but you from logging in, even if they know your password. The Duo mobile app makes this process simple as we all usually carry a smart phone with us so you can authenticate anywhere.

Duo Enrollment

If you're new to campus, the first time you go to access a campus system, you'll be prompted to create your Duo account. Once you do that, you can choose your authentication method and manage your devices you'll be using with Duo.

Manage Your Duo Account & Devices

Duo Authentication Methods

Duo Mobile App - Recommended

Image of Duo push notification pop-up
While there are other authentication methods within Duo (ask the IRT Service Desk if you require an alternative), the recommended - and easiest way to Duo - is by downloading the Duo mobile app to your Android or iOS smartphone and using Duo Push notifications:Setup Duo Mobile App/Duo Push


Supported Browsers

  • Chrome
  • Firefox
  • Safari
  • Edge
  • Opera
  • Internet Explorer 11 or later

Some browsers don't support all of Duo's authentication methods/devices (example: Security Keys won't work with Internet Explorer). For the widest compatibility, use recent versions of Chrome or Firefox.

Mobile Device Security & Duo Flooding

Duo is one of many ways you can protect your device - and the data you access with it.

A scam you need to look out for is "Duo Flooding." If your Sac State account becomes compromised, hackers may attempt to send you Duo push notifications you didn't originate in the hopes that you'll accept and allow them to gain access to campus systems as "you." If you receive a Duo push notification you did not originate, follow these steps:

  1. Press the deny button, then click "yes" to report it as a suspicious login.
  2. Change your password ASAP to something completely different at password.csus.edu

Learn more tips and recommendations about mobile device security:

Mobile Device Security

How To’s & Support

Duo Online Support


Contact the IRT Service Desk Team