Service overview

Two-factor authentication (2FA) adds a layer of security to the authentication process when you sign in to Microsoft 365 online applications, the Virtual Private Network (VPN), and most browser-based applications (e.g., Workday, the Sun Life pension site etc.) when you are off-campus. Over time, additional systems and applications will also require 2FA.

Your identity is verified by using two methods or “factors” of authentication:

1. Something you know (McGill password)
2. Something you have (a mobile device or landline)

2FA makes it more difficult for online attackers to gain access to your account. Even if an unauthorized person has your password, it is unlikely that they will also have your device.

Self-Service Password Reset (SSPR) is a Microsoft feature that provides 2FA users with the ability to reset their own password if they have forgotten it, or are locked out of their account.

NOTE: SSPR is only available for accounts that are 2FA-enabled.

---

Who can use it

• All McGill faculty, staff, and student accounts require 2FA.
• McGill retirees and alumni are encouraged to enroll to protect their account. See How to request and access the service.

---

How to request & access the service

To use 2FA, you will need:

• Your McGill username and McGill password
• A mobile device (tablet or smartphone) or landline

Configuring your 2FA setup

All McGill staff, faculty, and students are required to protect their accounts with 2FA. When you first log in using your McGill username and password, you will be directed to set up 2FA. Follow the instructions to configure you 2FA setup using the method of your choice.

Enrolling voluntarily

McGill retirees and alumni are encouraged to enroll to protect their account.

To voluntarily enroll in 2FA:

1. Go to the 2FA enrollment page.
2. Use your McGill credentials to log in at the top of the page.
3. To help provide specific instructions, you will be asked a few questions.
4. Unless instructed to call the IT Service Desk, click Submit at the bottom of the page.
5. Follow the set-up instructions in the confirmation email that you will receive. IMPORTANT: You must complete the 2FA set up immediately or you will be locked out of your account. 

---

Cost

There is no cost associated with this service.

---

Availability

This service is available 24 x 7.

---

Frequently asked questions

Visit the 2FA FAQs.

---

Best practices & policies

For more information on how personal information is stolen and misused, and how you can minimize your risk, see the article Personal information and identity theft.

---

Training & documentation

We recommend taking the Cybersecurity Essentials Training online training module to help protect yourself while you work, study, and roam! 

Topics addressed include data security, passwords, phishing, web conferencing, social networks, and file sharing. Each section of the online training lasts approximately one minute. The training is offered in English and French, and each module can be interacted with visually and/or audibly. 

Please visit the Cybersecurity Essentials Training knowledge base article for more detailed information.

For additional information about 2FA, Canada's Get Cyber Safe website has a wealth of information as well.

---

Support

If you require assistance with 2FA, log into the IT Support site and start a live chat with an IT Service Desk agent Monday to Friday, 9:00 AM to 5:00 PM EST. Once you are logged in, scroll down to the IT Support Chat window and click the blue button to start a text chat. Alternatively, you can book a one-on-one virtual support session.