Have you ever been the victim of a phishing attack or received an email pretending to be from a colleague after their account was compromised? AU relies on Duo Multifactor Authentication (MFA) to protect our account holders from unauthorized access to their accounts and account data. All Faculty, Staff, and Students must enroll a device to use Duo.

American University requires use of Multi-Factor Authentication (MFA) on AU systems, including Outlook/Office 365. This security standard helps all users to prevent unauthorized access to email and data, and reduces phishing attacks within the AU community. See how MFA fits into the process for authenticating to AU systems.

Additionally, we are expanding the requirement to use Duo across other AU systems and services including the VPN.

New to American University?

1. Learn how to use Duo Multi-Factor Authentication at American University by viewing An Introduction to Duo Security, below.
2. Enroll your device using our guide for first-time users (login required).

Existing American University account holders

All AU account holders must keep their account in good standing for it to remain active. account to remain active. 

1. Make sure your password recovery options are setup in AU's Self-Service Password Reset tool.
2. Passwords must be reset once a year. Be sure to reset yours if it's expiring soon.
3. Review any devices and phone numbers you have enrolled in Duo. You can add more than one device. If you've changed phones, don't forget to activate Duo Mobile on your new phone.

Popular Topics

Still using an AU Gmail Account?

Students and Alumni still using their AU-sponsored Gmail account need to setup Google's Multi-factor Authentication on Gmail.

• Google refers to their MFA as "2-Step Verification" or "2SV", and is different than Duo MFA.
• Follow Google's instructions on setting up 2-Step Verification for your AU Gmail account