Information Technology Services IT Security Office
Note: Two-factor authentication (2FA) is mandatory for Mason employees
to access the Cisco AnyConnect VPN 

Enroll a Backup Device

You can enroll other types of devices but only devices with a phone number can be used during the initial enrollment.

To enroll a backup device:

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with your previously enrolled device.
  4. On the Management Options page click the type of device you are trying to enroll.
  • Enroll a Phone
  • Enroll a Tablet
  1. Follow the prompts to enroll your additional device.

Remove an Enrolled Device

You can remove an enrolled device at any time as long as you always have one device on your account.

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with your previously enrolled device.
  4. On the Management Options page click Manage Current Devices
  5. Locate the device you want to remove from the list.
  6. Click the trash can next to the device that you would like to remove.
  7. It will prompt you to confirm your action, click OK.

Your device has been removed.

Update your Emergency Bypass Email Address

You can update your emergency bypass email address at anytime. 

Note: This emergency bypass email address is used to request an Emergency Bypass Code if you don't have access to your device. If you opt not to enter an emergency bypass email address it will make the process harder to get back into 2FA.

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with your previously enrolled device.
  4. On the Management Options page click Update Emergency Bypass Email Address.
  5. Enter your emergency bypass email address in the two boxes provided.
  6. Click Save and Continue

Your email address has been updated.

Lost or Stolen Phone?

Even if you lose your phone, remember that your password will still protect your account. It is recommended that you remove the lost or stolen device from your account as soon as possible.  You can enroll a replacement device when it is available.  You can use your other enrolled device to make the changes.  To remove the lost or stolen phone do the following:

  1. On a web browser go to the 2FA webpage, 2fa.gmu.edu. Click 2FA Account Login on the bottom right.
  2. Login with your Mason NetID and Patriot Pass Password.
  3. Complete the second factor authentication with another enrolled device.
  4. On the Management Options page click Manage Current Devices.
  5. Locate the device you want to remove from the list.
  6. Click the trash can next to the device that you would like to remove.
  7. It will prompt you to confirm your action, click OK.

Your device has been removed. 

No additional device enrolled? Request an Emergency Bypass Code to get logged in.