How do I set up and use CalNet 2-Step?

A knowledge base article about How do I set up and use CalNet 2-Step? provided by the UC Berkeley IT Service Hub - Knowledge Portal

Table of Contents

What is CalNet 2-Step?

CalNet 2-Step at UC Berkeley (Multi-Factor Authentication, or MFA) helps secure your account by requiring a second step to verify your identity. All students, staff, faculty, alumni, delegates, and affiliates are required to use 2-Step when logging in to campus systems. This ensures that even if someone steals your CalNet passphrase, they cannot access your account.

How do I set up CalNet 2-Step?

If you are logging in to a campus system and do not have 2-Step set up, you will be prompted to enroll a device automatically. Alternatively, you can log in to the CalNet Account Manager to sign up.

Choose Your Devices

Before signing up, decide which devices you will use for 2-Step. We recommend enrolling at least two devices so you can still log in if you lose one. Choose a device you can access easily, such as your smartphone. Additional devices can include a second phone, a tablet, a YubiKey, or Touch ID. Find out more about enrolling devices on the Duo website.

Recommended! Enroll a Smartphone

We recommend you use your smartphone for 2-Step. Have your charged smartphone with you and access to a computer with an internet connection. Download the Duo Mobile App for your device from the App Store or Google Play.

  1. Use your CalNet ID and passphrase to log in to CalNet Account Manager.
  2. Select Duo Mobile and enter your phone number.
  3. From your smartphone, open the Duo Mobile app and tap Add Account.
  4. Point your smartphone’s camera at the QR barcode on your computer screen to scan it.

Recommended! Print Your Backup Codes

If you lose your phone or run out of battery, you can easily get locked out. Avoid the stress and print your Bypass Codes before you need them!

  1. Log in to https://mycalnet.berkeley.edu
  2. Scroll down and click Renew (or Generate) Bypass Codes.
  3. Print out the 10 single-use codes and store them somewhere secure (like your wallet or a locked drawer).

How to do a 2-Step

Standard Duo Push

A "push" is an approval request sent to your smartphone or tablet. Log in with your credentials, then tap Approve on your Duo Mobile app notification.

Verified Duo Push (Number Matching)

You may sometimes be asked to perform a Verified Duo Push. A 3-digit number will appear on your computer login screen; you must type that number into the Duo Mobile App on your phone to complete the login. This occurs for high-risk logins or new locations.

Using Passcodes from Duo Mobile

You can use a passcode from the Duo App even if you do not have WiFi or a cellular connection. Tap the UC Berkeley entry in your Duo app to view a 6-digit single-use passcode.

Add a new device to an existing 2-Step account

  1. Sign in to mycalnet.berkeley.edu.
  2. Click on Manage 2-Step Verification in the left-hand menu.
  3. Click on Duo Device Manager and follow the prompts to add a new device (e.g., a second phone, tablet, security key, or Touch ID).

See also:

Back to top