Use Two-Factor Authentication (Duo)

Turn on Two-Factor for Weblogin Now  
Two-factor (Duo) authentication for Weblogin is required for all current faculty, staff, student employees, and sponsored affiliates.

What Is Two-Factor?

Two-factor means that when you log in, you provide two proofs of your identity. At U-M, that means your password plus Duo. You can choose from multiple Duo options. An attacker who gets your password won't be able to log in as you without your Duo option.

Who Needs to Use Two-Factor at U-M

  • Duo is required for access to specific U-M systems and some departmental services.
  • It has been required for systems covered by Weblogin for employees and sponsored affiliates of Michigan Medicine since October 2018.
  • It has been required with Weblogin for employees and sponsored affiliates (who have regular uniqnames) at UM-Ann Arbor, UM-Dearborn, and UM-Flint since January 23, 2019. Note: It is not required for sponsored affiliates who have temporary uniqnames.
  • It is not required of retirees, alumni, or students at this time, although they are welcome and encouraged to turn it on for Weblogin to add protection to their information in Wolverine access, U-M Google account, and more.
  • Retirees, alumni, and students who also have an employee or sponsored affiliation with the university are required to use Duo. This includes retired faculty who have emeritus appointments (paid or unpaid) in the Human Resource Management System.
  • If you are no longer actively employed, you cannot turn off two-factor for Weblogin until the appointment is fully terminated in the the Human Resource Management System.
Note: Duo's Services Privacy Notice addresses how all of Duo's services, including Duo Mobile, handle data. For further detail, see Duo Mobile Privacy Information.