Table of Contents
What is CalNet 2-Step?
CalNet 2-Step at UC Berkeley (Multi-Factor Authentication, or MFA) helps secure your account by requiring a second step to verify your identity. All students, staff, faculty, alumni, delegates, and affiliates are required to use 2-Step when logging in to campus systems.
How do I set up CalNet 2-Step?
If you are logging in to a campus system and do not have 2-Step set up, you will be prompted to enroll a device to log in; alternatively, log in to mycalnet.berkeley.edu to be prompted to sign up for 2-Step.
Choose Your Devices
Before signing up, decide which devices you will use for 2-Step. We recommend enrolling at least two devices so you can still log in if you lose one. Choose a device you can access easily, such as your smartphone. Additional devices can include a second phone, a tablet, a YubiKey, or Touch ID. Find out more about enrolling devices on the Duo website.
Recommended! Enroll a Smartphone
We recommend you use your smartphone for 2-Step. Have your charged smartphone with you, and access to a computer with an internet connection. Download the Duo Mobile App for your device from the App Store or Google Play.
- Use your CalNet ID and passphrase to log in to CalNet Account Manager.
- Select Duo Mobile and enter your phone number.
- From your smartphone, open the Duo Mobile app and click "Add Account."
- Point your smartphone’s camera at the QR barcode on your computer screen to scan it.
Recommended! Print Your Backup Codes
If you lose your phone or run out of battery, you can easily get locked out. Avoid the stress and print your backup passcodes before you need them!
- Login to https://mycalnet.berkeley.edu
- Scroll down, and click Renew (or Generate) Bypass Codes.
- Print out the 10 single-use codes and store them somewhere secure.
How to do a 2-Step
Using a Duo Push
A "push" is an approval request you can send to your smartphone or tablet. Log in with your credentials, then approve the request on your Duo Mobile app.
Verified Duo Push
You may sometimes get asked to do a Verified Duo Push, where you'll be asked to enter a 4-digit security code in the Duo Mobile App instead of just tapping the checkmark. This occurs for high-risk logins (new locations, new IPs, etc.).
Using Passcodes from Duo Mobile
You can use a passcode from the Duo App even if you do not have WiFi or cellular connection. Tap the "CalNet - UC Berkeley" entry in the app to view a single-use passcode.
Add a new device to an existing 2-Step account
- Sign in to mycalnet.berkeley.edu
- Click on Manage 2-Step Verification in the left-hand menu.
- Click on DUO Device manager and follow the prompts to add a new device.
- You can add a second phone, a tablet, a security key, or touch ID. Make sure you always have more than one way to do a 2-Step.
See also:
How to enroll a security key or YubiKey
How to enroll a simple hardware token
How to enroll a basic cell phone