CalNet 2-Step: Using a Simple Hardware Token

Availability Status

Simple hardware tokens are no longer available; however, students who already have one can enroll it and use it to complete CalNet 2-Step.

Note: These tokens only work for standard 2-Step logins. They do not support Verified Duo Push.

How to Register and Enroll Your Token

You must register your token before it can be used for authentication:

• Log in to mycalnet.berkeley.edu
• Select Manage 2-Step Verification
• Choose Duo Device Manager
• Authenticate with an existing device or backup code
• Select Add a New Device
• Choose Hardware Token
• Enter the Serial Number from the back of the token
• Register the device by following the remaining on-screen prompts

How to Use Your Token

• Log in to a campus system with your CalNet ID and passphrase
• Select Other options when the 2-Step prompt appears
• Select Hardware Token or Passcode
• Press the button on your token to generate a 6-digit code
• Type the 6-digit code into the login screen
• Click Verify

Care Instructions

Tokens typically last 3 to 5 years; if the screen is blank or fading, the battery has reached its end of life and cannot be replaced. To keep your token functional, avoid strong magnets which can de-sync the internal clock. If the token generates codes that fail repeatedly, contact the IT Service Desk to see if it can be re-synced.

When you are ready to dispose of your token, please properly recycle it.

Need Help? Contact the campus service desk.