Mason uses Duo Security to deliver Two-Factor Authentication (2FA) when using your NetID and Patriot Pass Password to log in to Mason applications. This second layer of protection makes your personal information and Mason’s information less vulnerable.
2FA is required for all Mason users, including students, faculty, staff, and contractors/affiliates.
2FA uses two factors to verify you are who you say you are. 2FA makes your personal information less vulnerable and helps prevent anyone but you from accessing your accounts, even if they know your Patriot Pass Password.
- The first factor (something you know) is the verification of the Mason NetID and Patriot Pass Password, and
- The second factor* (something you have) is generally a smartphone, but other options are available
* Like accounts and passwords, the second factor must be unique to you and not shared with other users
Getting This Service
A phone is needed for enrollment. Follow the instructions below based on the type of device you will be using:
- How to Enroll in 2FA with a Smartphone
- How to Enroll in 2FA with a Landline or Text-only Mobile Phone
Once enrolled, you will log in to applications by entering your NetID and Patriot Pass Password (first factor) and then confirm your identity using a physical device (second factor). The physical device may be a smartphone, tablet, bypass code, or Yubikey (See the List of Authentication Options).
Note: You are not permitted to share 2FA devices, such as smartphones, Yubikeys, or bypass codes, to authenticate your identity. You may not use your university phone number as the device to verify your identity. Duo accounts inactive for 365 days will be removed from enrollment but can be reactivated by re-enrolling in Duo.
All users of the George Mason University network must adhere to University Policy Number 1301: Responsible Use of Computing.
Faculty and staff must also adhere to: