Table of Contents
Availability Status
Simple hardware tokens are no longer available; however, students who already have one can enroll it and use it to complete CalNet 2-Step.
Note: These tokens only work for standard 2-Step logins. They do not support Verified Duo Push.
How to Register and Enroll Your Token
You must register your token before it can be used for authentication:
- Log in to mycalnet.berkeley.edu
- Select Manage 2-Step Verification
- Choose Duo Device Manager
- Authenticate with an existing device or backup code
- Select Add a New Device
- Choose Hardware Token
- Enter the Serial Number from the back of the token
- Register the device by following the remaining on-screen prompts
How to Use Your Token
- Log in to a campus system with your CalNet ID and passphrase
- Select Other options when the 2-Step prompt appears
- Select Hardware Token or Passcode
- Press the button on your token to generate a 6-digit code
- Type the 6-digit code into the login screen
- Click Verify
Care Instructions
Tokens typically last 3 to 5 years; if the screen is blank or fading, the battery has reached its end of life and cannot be replaced. To keep your token functional, avoid strong magnets which can de-sync the internal clock. If the token generates codes that fail repeatedly, contact the IT Service Desk to see if it can be re-synced.
When you are ready to dispose of your token, please properly recycle it.
Need Help? Contact the campus service desk.