How to Use Two-Factor
Once you鈥檝e set up two-factor authentication, you鈥檙e ready to log in to your TMU accounts and provide verification codes whenever asked. Here are a few pointers on how to use two-factor at TMU:
Using two-factor with a mobile device
If you鈥檝e chosen to generate codes with a mobile device, this means you鈥檒l need to open the Google Authenticator app every time you鈥檙e asked for a verification code during logins to your TMU account.
Always keep Google Authenticator installed
- Since two-factor is a requirement for many apps at TMU, you will be using it on a regular basis to generate verification codes.
- Don鈥檛 delete the Google Authenticator app or your account from within it鈥攜ou鈥檒l need it for the entire duration of your time at TMU.
- When logging in to your TMU account, enter your my.torontomu username and password.
- Afterwards, a two-factor authentication screen will prompt you for a one-time verification code.
- At this point, open the Google Authenticator app on your mobile device to retrieve a code and enter it to log in.
Tip: If you鈥檇 rather not type in a code every time you log in, you can select the box, 鈥淚 trust this browser on this device. Don鈥檛 ask for codes for 30 days.鈥� This means you trust the browser on the device you鈥檙e using and you鈥檒l only be prompted for a verification code once every 30 days.
Using two-factor with a U2F security key
If you鈥檝e chosen to authenticate two-factor using a universal second factor (U2F) key, this means you鈥檒l need the key on-hand every time you鈥檙e asked for a verification code during logins to your TMU account.
Note U2F keys will only work with a Chrome or Firefox browser.
- When logging in to your TMU account, enter your my.torontomu username and password.
- Afterwards, a two-factor authentication screen will prompt you to insert your U2F key.
- At this point, insert the U2F key into a USB port on your computer.
- Select on NEXT
- Once the key starts blinking, do one of the following, depending on the style of key you have:
- Press the raised button on the key; or
- Touch the metal sensor plate on the surface of the key; or
- Touch the metal sensor prongs on either side of the key.
- Once the key starts blinking, do one of the following, depending on the style of key you have:
- You may be prompted with a screen confirming your key has been accepted.
- When the screen shows you鈥檝e logged in, you can remove the key.
Tip: If you鈥檇 rather not type in a code every time you log in, you can select the box, 鈥淚 trust this browser on this device. Don鈥檛 ask for codes for 30 days.鈥� This means you trust the browser on the device you鈥檙e using and you鈥檒l only be prompted for a verification code once every 30 days.
If you鈥檙e ever without your key, you still have the option of entering a code by clicking the link, 鈥淟og in with verification code instead鈥�.
Using two-factor with an OTV code generator
If you鈥檝e chosen to generate codes with a one-time verification (OTV) code generator, this means you鈥檒l need the device on-hand every time you鈥檙e asked for a verification code during logins to your TMU account.
- When logging in to your TMU account, enter your my.torontomu username and password.
- Afterwards, a two-factor authentication screen will prompt you for a one-time verification code.
- At this point, press the button on your OTV code generator to retrieve a code and enter it to log in.
Tip: If you鈥檇 rather not type in a code every time you log in, you can select the box, 鈥淚 trust this browser on this device. Don鈥檛 ask for codes for 30 days.鈥� This means you trust the browser on the device you鈥檙e using and you鈥檒l only be prompted for a verification code once every 30 days.
Tips for making two-factor work for you
If you鈥檙e using a browser on a device that no one else uses, consider selecting the option 鈥淚 trust this browser on this device. Don鈥檛 ask for codes for 30 days鈥� upon your next TMU account login.
How does it work?
This feature uses a cookie to remember your device. The cookie itself doesn鈥檛 contain any information about you or the device you鈥檙e using. Instead, it verifies that you鈥檙e using a device that you previously registered.
Removing trusted browsers
To remove devices from your list of trusted devices, you can:
- Delete all cookies from the browser on your device; or
- Log in to the my.torontomu portal with your username and password
- Find the Self Service module under the my.torontomu tab and select Personal Account.
- Under the Security section, select Two-Factor Authentication.
- Find the section called The following are registered as trusted browsers/devices and select the button to Revoke all Trusted Devices.
Troubleshooting issues with trusted browsers
If you鈥檙e prompted to enter a verification code despite having opted to trust a browser on a device, try the following solutions:
Make sure cookies are enabled on your browser
Cookies must be enabled and allowed to store on your computer as the 鈥渢rust this browser鈥� option will not work if your browser doesn鈥檛 have cookies enabled; is set to delete cookies after a certain period of time; or is set to delete cookies every time you quit the browser.
鈥淭rust鈥� browsers and devices one-by-one
If you use different browsers or devices, each one needs to be designated as a trusted browser or device the first time you sign in with it.
For example, trusting Chrome on your desktop does not automatically mean Chrome is trusted on your laptop or mobile device鈥攜ou must opt to trust Chrome on every device you sign in from.
Check if you鈥檙e browsing in incognito or privacy mode
Since incognito or private browsing windows cannot access existing cookies from other browser sessions on your device, it won鈥檛 know if you鈥檝e previously designated the browser as a trusted browser. If you want to use the 鈥渢rust this browser鈥� option, sign in to your TMU account using a regular browsing window.
If your phone is ever upgraded, lost or stolen, you will be locked out of your TMU account. This is because your account is configured to be used only with the phone or U2F key you had at the time of two-factor setup.
What can you do?
Generate backup codes ahead of time so they can be used in the event your phone is replaced or goes missing. Here鈥檚 how:
- On your computer, log in to the my.torontomu portal with your username and password.
- Find the Self Service module under the my.torontomu tab and select Personal Account.
- Under the Security section, select Two-Factor Authentication.
- Select the Generate new backup codes button.
Write down the codes and keep them in a safe place where you can easily retrieve them when needed.
Is it too late?
If you no longer have the phone you used to set up two-factor authentication, check out your options on the Locked Out? New Phone? page.
Where you can expect to use two-factor
Two-factor authentication is widely used at TMU and the number of systems requiring it use is continually growing. Learn more about the apps that require two-factor.