What is Two-Factor Authentication (2FA)?

Two-factor authentication (2FA) is an enhanced logon process. After entering your password, you will need to confirm your access by using a designated device (e.g. your mobile).  This prevents unauthorized access to sensitive data even if your password is stolen. In HKUST, we employ an application named Duo and you may refer to our web page Duo Security for more information.

How it works

When access to applications supporting 2FA e.g. HKUST SSO Service

1. Enter your email address and password
2. Use your physical device to verify your identity e.g. your mobile phone or tablet
3. You are securely logged in

After you have enrolled for two-factor authentication and access to applications supporting 2FA, you will need to login using your Email Address / password and then use your device to verify your identity. Duo will issue automatic push to your mobile or you can select Other options if applicable.

On trusted devices such as your own laptop, select Yes, trust browser so that you won't be prompted for 45 days for the same 2FA-protected web application with the same browser on the same device. It only works for web applications, VPN authentication does not honor this feature.

Please note that 2FA is only available to staff and enrolling students. The personal information registered for 2FA will be removed when a staff member or student leaves the University.

[Under circumstances when you cannot access your mobile device, you can also obtain a one-time Duo Bypass Code (not the one-time passcode) to access a 2FA application.]

Getting Started

• Enrollment for two-factor authentication
• Ways to pass 2FA
• Survival tips on using 2FA

Application Readiness (enabled with 2FA)

When accessing the above 2FA supported applications, please remember to have your mobile device around to respond the Duo PUSH notification sent to your mobile device. In case there is no network connection, you can use one-time passcode  (obtain from your Duo Mobile App).