Service overview

Two-factor authentication (2FA) adds a layer of security to the authentication process when you sign in to Microsoft 365 online applications, the Virtual Private Network (VPN), and most browser-based applications (e.g., Workday, Sunlife pension site etc.) when you are off-campus. Over time, additional systems and applications will also require 2FA.

Your identity is verified by using two methods or “factors” of authentication:

1. Something you know (McGill password)
2. Something you have (mobile device - tablet or phone)

2FA makes it more difficult for online attackers to gain access to your account. Even if an unauthorized person has your password, it is unlikely that they will also have your device.

Self-Service Password Reset (SSPR) is a Microsoft feature that provides 2FA users with the ability to reset their own password if they have forgotten it, or are locked out of their account.

NOTE: SSPR is only available for accounts that are 2FA-enabled.

---

Who can use it

• All McGill faculty, staff, and student accounts require 2FA.
• McGill retirees and alumni are encouraged to enroll to protect their account. See How to request and access the service, below.

---

How to request & access the service

To use 2FA, you will need:

• Your McGill username and McGill password
• A mobile device (tablet or smartphone) or landline

Configuring your 2FA setup

All McGill staff, faculty, and students are required to protect their accounts with 2FA. When you first log in using your McGill username and password, you will be directed to set up 2FA. Follow the instructions to configure you 2FA setup using the method of your choice.

Steps to enroll voluntarily (e.g., McGill retirees, alumni, etc.)

1. Go to the 2FA enrollment page.
2. Log in at the top of the page and answer a few questions so that we can provide instructions specifically for you.
3. Unless instructed to call the IT Service Desk, click "Submit" at the bottom of the page to enroll.
4. IMPORTANT: Once you click "Submit", you must complete the 2FA setup immediately by following the set-up instructions in the confirmation message you will receive. Otherwise, you will be locked out of your account.

---

Cost

There is no cost associated with this service.

---

Availability

This service is available 24 x 7.

---

Frequently asked questions

Visit the 2FA FAQs.

---

Best practices & policies

For more information on how personal information is stolen, used, and how you can minimize your risk, see the article Personal information and identity theft.

---

Training & documentation

We recommend taking the Cybersecurity Essentials Training course. Protect yourself while you work, study, and roam! 

Topics addressed include data security, passwords, phishing, web conferencing, social networks, file sharing, and more! Each section of the course lasts approximately 1 minute. The course is offered in English and French, and each module can be interacted with visually and/or audibly. 

Please visit the Cybersecurity Essentials Training knowledge base article for more detailed information.

For additional information about 2FA, Canada's Get Cyber Safe website has a wealth of information as well.

---

Support

If you require assistance with 2FA, log into the IT Support site and start a live chat with an IT Service Desk agent Monday to Friday, 9:00 AM to 5:00 PM EST. Once you are logged in, scroll down to the IT Support Chat window and click the blue button to start a text chat. Alternatively, you can book a one-on-one virtual support session.