Attackers today are focused on getting your password, so they can gain access to your account. Two-step verification is an extra layer of security that requires your password and something that only you have. The second step is typically a one-time code sent via text to your mobile phone. Read more about this month's cyber security awareness tip. Go to vpn.american.edu/duo to enable it on your AU account, and watch the multifactor authentication video for detailed instructions.