What is CalNet 2-Step?

CalNet 2-Step (Multi-Factor Authentication, or MFA) helps secure your account by requiring a second step to verify your identity. All students, staff, faculty, delegates, and affiliates are required to use 2-Step when logging in to campus systems.

How do I sign up for CalNet 2-Step?

If you are logging in to a campus system and do not have 2-Step set up, you will be prompted to enroll a device to log in; alternatively, log in to mycalnet.berkeley.edu to be prompted to sign up for 2-Step.

Choose Your Devices

Before signing up, decide which devices you will use for 2-Step. We recommend enrolling at least two devices so you can still log in if you lose one. Choose a device you can access easily, such as your smartphone. Additional devices can include a second phone, a tablet, a YubiKey, or Touch ID. Find out more about enrolling devices on the Duo website.

Recommended! Enroll a Smartphone

We recommend you use your smartphone for 2-Step. Before you enroll:

• Have your charged smartphone with you.
• Have access to a computer with an internet connection, as the enrollment process starts on your laptop or desktop, then switches to using your smartphone to scan a QR barcode (it's the square with all the squiggles).

• When prompted to enroll in 2-Step in your web browser:
  • Select Duo Mobile
  • Enter your device’s phone number, including the area code. Example: (201) 555-5555
  • Select Add Phone Number
  • Verify that your number is correct and select Yes, it’s correct
  • You may also be asked to confirm ownership of your phone number:
    • If so, select Send me a passcode
    • When you receive a 6-digit passcode via text, enter it into the box to verify

• From your smartphone: 
  • Download the Duo Mobile App from the Apple Store, Google Play Store, or Windows Store
  • Open the Duo Mobile app
  • Click Allow to allow Duo to send you notifications
  • Click Add Account
  • Click OK to let Duo Mobile access your camera

• On your computer, click Next
  • Point your smartphone’s camera at the QR barcode on your computer screen to scan it. 
  • Once you have successfully scanned the code, a green check mark will appear to confirm that your smartphone is linked to your account. Click Continue.
  • You may be prompted to name your account after pressing the green Continue button. We suggest leaving it as CalNet UC Berkeley or choosing a name that is obvious to you.

Enrollment Completed. Congratulations! You’ve successfully enrolled your smartphone. Now, when you log in to campus systems, you will be able to complete the second step.

 

Print Your Backup Codes at mycalnet.berkeley.edu (Don't Skip!)

If you lose your phone or run out of battery, you can easily get locked out. Avoid the stress and print your backup passcodes before you need them!

• Login to https://mycalnet.berkeley.edu
• Scroll down, and click Renew (or Generate) Bypass Codes
• Print out the 10 single-use codes and store them somewhere secure (like your wallet).
• Use one at a time as needed; codes can only be used once

Add a new device to an existing 2-Step account

• Sign in to mycalnet.berkeley.edu
• Click on Manage 2-Step Verification in the left-hand menu
• Click on DUO Device manager.
• Login to the DUO Device manager.
  • You will be prompted to log in with your CalNet ID and passphrase, again, and to complete a 2-Step.
• Once authenticated, you will land in the Duo Device Management Portal. Your existing devices (if any) will be listed.
• Select Add a New Device
• Follow the prompts or see  Duo website for additional instructions.

Learn How to Use CalNet 2-Step