How do I set up and use CalNet 2-Step?

A knowledge base article about How do I set up and use CalNet 2-Step? provided by the UC Berkeley IT Service Hub - Knowledge Portal

Table of Contents

What is CalNet 2-Step?

CalNet 2-Step at UC Berkeley (Multi-Factor Authentication, or MFA) helps secure your account by requiring a second step to verify your identity. All students, staff, faculty, alumni, delegates, and affiliates are required to use 2-Step when logging in to campus systems.

How do I set up CalNet 2-Step?

If you are logging in to a campus system and do not have 2-Step set up, you will be prompted to enroll a device to log in; alternatively, log in to mycalnet.berkeley.edu to be prompted to sign up for 2-Step.

Choose Your Devices

Before signing up, decide which devices you will use for 2-Step. We recommend enrolling at least two devices so you can still log in if you lose one. Choose a device you can access easily, such as your smartphone. Additional devices can include a second phone, a tablet, a YubiKey, or Touch ID. Find out more about enrolling devices on the Duo website.

Recommended! Enroll a Smartphone

We recommend you use your smartphone for 2-Step. Have your charged smartphone with you, and access to a computer with an internet connection. Download the Duo Mobile App for your device from the App Store or Google Play.

Recommended! Print Your Backup Codes

If you lose your phone or run out of battery, you can easily get locked out. Avoid the stress and print your backup passcodes before you need them!

  1. Login to https://mycalnet.berkeley.edu
  2. Scroll down, and click Renew (or Generate) Bypass Codes.
  3. Print out the 10 single-use codes and store them somewhere secure.

How to do a 2-Step

Using a Duo Push

A "push" is an approval request you can send to your smartphone or tablet. Log in with your credentials, then approve the request on your Duo Mobile app.

Verified Duo Push

You may sometimes get asked to do a Verified Duo Push, where you'll be asked to enter a 4-digit security code in the Duo Mobile App instead of just tapping the checkmark. This occurs for high-risk logins (new locations, new IPs, etc.).

Using Passcodes from Duo Mobile

You can use a passcode from the Duo App even if you do not have WiFi or cellular connection. Tap the "CalNet - UC Berkeley" entry in the app to view a single-use passcode.

Add a new device to an existing 2-Step account

  1. Sign in to mycalnet.berkeley.edu
  2. Click on Manage 2-Step Verification in the left-hand menu.
  3. Click on DUO Device manager and follow the prompts to add a new device.
  4. You can add a second phone, a tablet, a security key, or touch ID. Make sure you always have more than one way to do a 2-Step.

See also:

How to enroll a security key or YubiKey

How to enroll a tablet

How to enroll a simple hardware token

How to enroll a basic cell phone

 

Back to top