按此查閱中文版本
Applies To
All CUHK Staff, Student & Project Accounts
What is 2FA and why should I need it?
Two-factor authentication (2FA) requires users to provide two different types of information, e.g. a password and a secondary verification (such as an approval from your smart phone), before accessing their accounts. This helps to prevent unauthorized access even if your password is stolen.
Please refer to Duo 2FA website for more information.
Solution
The enrollment could be done using a smartphone solely or using a smartphone and a computer. The steps using either method is identical.
|
⚠️ Do not remove the Duo Mobile app after registration!
You need the Duo Mobile app to sign in to all University IT services.
|
- Download and install Duo Mobile app from App Store (iOS) or Play Store (Android)* to your mobile device.

* Duo Mobile APK (checksum) is available to Android devices that cannot access to Google Play Store.
Huawei devices are not supported. Please refer to this article for details and workaround.
- Visit registration portal at https://duo.itsc.cuhk.edu.hk/ using any web browser. Sign-in using your email address and OnePass password.
- You will see a window with Protect Your CUHK Account shown at the centre. Click Start setup.

- Click Get started to proceed.

- Select DUO Mobile to proceed.

- Select I have a tablet (even you are using a smartphone).

Notes: If you entered your phone number and completed the registration, no worries — Duo Mobile will work just fine; Choosing 'I have a tablet' will help avoid problems when you change your mobile devices in the future.
- Make sure you have downloaded Duo Mobile App to your device (see step 1), then click Next.

- Link your account to Duo Mobile app.
- If you visit the registration portal using a computer: you will see a QR code shown on screen. Open Duo Mobile app on your mobile phone, tap Continue (iPhone/iPad) / Set up account (Android) >> Use a QR code and scan the QR code that shown on screen.

- If you visit the registration portal using a smartphone: tap Continue and open Duo Mobile app when prompted.

- Enter an Account Name (default is CUHK). Tap Save to proceed.

- You will see Added Duo Mobile screen appears at web browser. Tap Continue to proceed.

- You may tap Log in with Duo to test your enrolled device. Please refer to article to learn ways to pass DUO 2FA.

- Follow the on-screen instructions to go through the remaining steps, in particular, Allow notifications to let you seamlessly receive and respond to 2FA push message.

- You will see an account is added in your Duo Mobile app once the above step is completed.

- You will see a message Almost Done shown. Click GET MY RESCUE CODES.

- A list of rescue codes will be generated (shown in red arrow). Please save these codes in a safe place.

- Click LOG OUT to complete your enrollment. Done.

Questions about Duo 2FA
When I need to use 2FA ?
You will be asked to verify your identity using either respond to push message or enter a passcode when sign in 2FA protected apps.
Switch to a new phone in future?
Read this article to know how to transfer the 2FA registration to your new mobile phone. It is recommended to keep your old phone on hand until it's all set.
I forget to bring my phone after enrollment. What should I do?
Read this article to know how to obtain a bypass code using your CU Link card (i.e. student card / staff card) and using the bypass code to verify your identity.
For other Frequently Ask Questions about Duo 2FA, please check at here.
#2FA #DUO #Two Factor Authentication #New Staff #New Students