Information Technology Services IT Security Office
 

2FA is now required for all employees to access Patriot Web and Banner-related applications.

  PP + Duo transparent background  

Enroll Additional Devices

Enrolling additional devices will help ensure you do not lose access to systems that require 2FA if something happens to your primary device. Additional devices do not have to be a phone, but only devices with a phone number can be used during the initial enrollment. To enroll a backup device:

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with your previously enrolled device.
  4. On the Management Options page click the type of device you are trying to enroll.
  • Enroll a Phone
  • Enroll a Tablet
  • Enroll a Yubikey
  1. Follow the prompts to enroll your additional device.

Remove an Enrolled Device

You can remove an enrolled device at any time as long as you always have one device on your account.

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with your previously enrolled device.
  4. On the Management Options page click Manage Current Devices
  5. Locate the device you want to remove from the list.
  6. Click the trash can next to the device that you would like to remove.
  7. It will prompt you to confirm your action, click OK.

Your device has been removed.

Update your Emergency Bypass Email Address

You can update your emergency bypass email address at any time. 

Note: This emergency bypass email address is a non-Mason email used to request an Emergency Bypass Code if you don't have access to your device. If you opt not to enter an emergency bypass email address it will make the process harder to get back into 2FA.

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with your previously enrolled device.
  4. On the Management Options page click Update Emergency Bypass Email Address.
  5. Enter your emergency bypass email address in the two boxes provided.
  6. Click Save and Continue

Your email address has been updated.

Lost or Stolen Phone?

If you lose access to your 2FA device, you will not be able to access any system that requires 2FA. Even though strong passwords help to protect your account, it is recommended that you remove the lost or stolen device as soon as possible. You will need to enroll a replacement device to do this.  If you already enrolled an additional device, it can be used to access your 2FA account. To remove the lost or stolen phone do the following:

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with another enrolled device.
  4. On the Management Options page click Manage Current Devices.
  5. Locate the device you want to remove from the list.
  6. Click the trash can next to the device that you would like to remove.
  7. It will prompt you to confirm your action, click OK.

Your device has been removed. 

No additional device enrolled? Request an Emergency Bypass Code to get logged in.

Replacing A Smartphone 

If you get a new smartphone and wish to use the DUO mobile app on it, you will need to replace your previous device. To replace a phone without adding a new phone number do the following: 

  1. On your smartphone go to the App Store and download the Duo Mobile app by Duo Security if you have not already.
  2. On a web browser go to 2fa.gmu.edu. Click 2FA Account Login on the bottom right. 
  3. Login with your Mason NetID and Patriot Pass Password. 
  4. Select Call Me and follow the prompts upon answering. 
  5. On the Management Options page click Manage Current Devices. 
  6. Locate your phone on the list of devices.
  7. Click the Reactivate button next to the phone.
  8. Select your phone type from the list. i.e. If you are enrolling an iPhone select iPhone and for an Android select Android. Then click Enroll Device. 
  9. Open the Duo Mobile App on your smartphone and click + or Add Account. Note: When configuring the app, allowing or enabling notifications improves your ability to authenticate using Duo Mobile.
  10. Scan the activation QR code to activate your device. 
  11. Click Continue

Your smartphone has been replaced.