Logging in with WashU 2FA

Logging-in after Registration is Complete

Most applications require your WUSTL Key ID and Password before authenticating with Duo (as described in steps 1 and 2 below). However, some applications require you to enter your WUSTL Key password after authenticating with Duo, such as with ECV (login instructions). And other applications require you to enter your WUSTL Key ID, password and Duo authentication method before authenticating with Duo then require you to re-enter your WUSTL Key password again after authenticating such as VPN (login instructions).

The most common login requirements are:

  1. Once enrolled in Duo, you’ll log in to the WashU system as usual with your WUSTL Key ID and password. This is the first step of authentication.
  2. Next, you’ll verify your identity using the enrolled device with your default settings. This is the second step of authentication.

Additional Duo Authentication Methods

Non-smartphones and Landlines

For information on using Duo with cell phones that are not smartphones and landline telephones, visit the Using Duo With Any Cell Phone or Landline Quick Guide.

Request a Pre-generated Passcode

DUO Passcode authentication is only applicable for individuals with an approved DUO Exception Request from the Office of Information Security. Please see Can I Still Use Passcode Authentication for more information.

If you do not have access to cell service or a registered device, you may request that the WashU IT Service Desk supply a pre-generated one-time use Duo passcode. Be prepared to share your WUSTL Key ID with the technician (never share your password with anyone). See Method 3 under Duo Authentication Manual Request Methods below to learn how to use the code.

Duo Authentication Manual Request Methods

Method 1: Request a Duo Push
  1. To receive a login request sent to the device registered with Duo, on the computer, select Send Me a Push
  2. Approve the DUO push sent to your device.
    1. Note: This push request expires after 60 seconds.
    2. If Duo notifications are not turned on, you may need to launch the Duo App and manually approve the request.
  3. Once authenticated, you will be automatically logged in.
Method 2: Get an SMS Text and Enter a Code

DUO Passcode authentication is only applicable for individuals with an approved DUO Exception Request from the Office of Information Security. Please see Can I Still Use Passcode Authentication for more information.

  1. To receive a text to the device registered with Duo, on the computer, select Text me new codes.
  2. The registered device will receive a group of passcodes in a text message.
    Note: Each code is good for a single-use. You can continue working through the list of codes until you have used them all before requesting new codes. Once a new set of codes has been sent, the previous set no longer works.
  3. Enter a code into the Passcode field and then select Log In.
  4. Once authenticated, you will be automatically logged in.
Method 3: Get a Code from the Registered Device or from the Service Desk and Enter the Code

DUO Passcode authentication is only applicable for individuals with an approved DUO Exception Request from the Office of Information Security. Please see Can I Still Use Passcode Authentication for more information.

  1. On the registered device, open the Duo app and expand the WUSTL Key section to reveal a code.
    If a new code is needed tap the refresh icon next to the old code.
    1. Note: You may also contact the WashU IT Service Desk to request a code.
  2. On the computer, enter the code WITHOUT SPACES into the passcode field and then select Log In.
  3. Once authenticated, you will be automatically logged in.
Method 4: Request a Phone Call
  1. To receive a call to the registered phone number, on the computer select Call Me.
  2. Answer the call and press any number on the phone keypad to authenticate.
  3. Once authenticated, you will be automatically logged in.