/ Computing and Information Technology

Multi-Factor Authentication

Active Faculty, Staff, and Students are required to have Multi-Factor Authentication (also called "Two-Factor" or "Two-Step Authentication") enabled on their 1Hope Accounts.

What is Multi-Factor Authentication (MFA)?

Simply typing a username and password to get into an account isn't very secure. To keep unauthorized people out of your 1Hope Account, you may be asked for another piece of verification to prove that you are you while logging in.

You can choose one or more "second steps" including:

How do I set it up?

Your 1Hope Account uses Google's 2-Step Authentication. If you are an active Faculty, Staff, or Student, you will be prompted to set it up when you log in. Failing to do so will mean that you will be locked out of your account.

Set up and manage Google 2-Step Verification 

Step-by-Step Instructions

GOOGLE PROMPT (RECOMMENDED)

This will confirm that you are you with a simple pop-up notification on your phone.

On iPhone, you’ll need to download and install the Gmail app and log in with your 1Hope Account.
On Android, it will work without any additional app as long as you’re logged into your 1Hope Account in Android settings.

  1. To get started, go to your 1Hope Account’s 2-Factor Settings.
  2. If you see Use your phone as your second step to sign in on the page and a listing of your device(s) under These devices can get prompts, click Continue.
    If you don’t, click Show More Options, then click Google Prompt.
  3. Click Continue.
  4. It will ask if you would like to set up a phone number as a backup option. You are free to choose this, or click Use another backup option to generate one-time-use backup codes.
  5. Click Next.
  6. Click Turn on.
  7. You’re done!

More information on Google's website 

PHYSICAL MFA SECURITY KEY

This is a hardware device that you could purchase that you plug into or pair with your computer or phone via USB, Bluetooth, or NFC. Common choices include YubiKey or Google's Titan Key.

  1. To get started, go to your 1Hope Account’s 2-Factor Settings.
  2. Click Show more options and click Security key.
  3. Click Next.
  4. Plug in or pair your key and tap the button or gold disc on the device.
  5. Type in a Name for your security key and click Done.
  6. You're done!

More information on Google's website Learn more about MFA key choices 

AUTHENTICATOR APP

This is an app that will generate a 6-digit code that you’ll have to enter. Popular choices include Google Authenticator, Authy, or your password manager.

  1. To get started, go to your 1Hope Account’s 2-Factor Settings.
  2. Follow the steps below to set up Text Message or Voice Call 2-Step Verification.
  3. On the 2-Step Verification settings screen, click Set Up under Authenticator App.
  4. Choose what kind of phone you have and click Next.
  5. Open your app, tap add a new account, follow the app’s instructions, and scan the QR Code.
  6. When the app starts showing you 6-digit codes, click Next and enter the code.
  7. Click Verify.
  8. You’re done!

More information on Google's website 

TEXT MESSAGE OR VOICE CALL

This will send you a text message or call you with a 6-digit code that you’ll have to enter.

  1. To get started, go to your 1Hope Account’s 2-Factor Settings.
  2. If you see Let's set up your phone on the page, enter your phone number and click Continue.
    If you don’t, click Show More Options, then click Text message or phone call.
  3. Click Next.
  4. You will receive a text message or phone call with the 6-digit code. Enter it and click Next.
  5. Click Turn on.
  6. You’re done!
ONE-TIME-USE BACKUP CODES (RECOMMENDED)

CIT recommends generating 10 one-time-use codes and keeping them somewhere safe, such as your wallet. As described below, these backup codes are meant as an emergency option to be able to log in should the above method not be available to you.

Create and view your backup codes 

CIT recommends choosing "Google prompts" for most users. This sends a pop-up to your device(s) with the Gmail app installed to confirm that you'd like to sign in.

What if I lose my phone or MFA device?

You have the option to generate "Backup Codes" after you set up MFA. If you're unable to use MFA sometime in the future, these one-time-use codes will allow you into your account. CIT recommends printing these codes out and keeping them somewhere safe, such as your wallet.

I need more help!

As always, if you need more help logging into your account or setting up MFA, contact the Help Desk at cit@hope.edu or x7670.