Passwords are the first line of defense when protecting your devices and accounts. As technology evolves so should password authentication.
What is password authentication? Authentication is a process that verifies the person entering the login information is the user of said accounts or devices. There are three main ways to authenticate.
- Knowledge-Based: Entering traditional password that only verified person would know
- Possession-Based: Swiping a keycard or clicking a link in an email that only the verified person would have
- Inheritance-Based: Scanning facial features or fingerprints of the verified person
In the modern age of technology, one version of authentication is often not secure enough. At UAB, we protect our accounts with strong passwords and double up with 2-factor authentication. 2FA is an extra layer of protection to keep the bad guys out, and keeps your research, money, identity, and personal information safe. It makes it harder for hackers to access accounts even if they have the password, because you have the power to approve or deny the second authentication with a notification from Duo, UAB’s 2-factor vendor.
How to improve your password authentication process at UAB:
- Enable Duo Push and the Duo Mobile app
- When logging into a Duo-protected application, click the “Send Me a Push” option to send a push notification to your device. Open the Push notification on your device, then click Approve in the Duo Mobile app to complete your authentication.
- Check “Remember Me” in the Duo prompt window
- When logging in on a device, browser, and site you trust, you can check “Remember Me” to be exempt from 2FA for 30 days on that device and browser. This will speed up your login process and continue to keep our campus secure.
- Never approve Duo notifications that you didn’t request.
- If you are receiving a Duo push that you didn’t request, someone may be trying to access your account. Always click “no” on login prompts from the app if you are unsure.
For more information check out our security page to learn more about 2FA and DUO.