Two-Factor Authentication

Also known as: 2FA; Duo 2FA; Multifactor authentication; Duo
Available to: Faculty & Staff

Service Summary

Mason uses Duo Security to deliver Two-Factor Authentication (2FA) when accessing web sites/applications protected by Mason’s Central Authentication Services (CAS) and the Cisco AnyConnect Virtual Private Network (VPN). This second layer of protection makes your personal information and Mason’s information less vulnerable.

Effective April 15, 2018, all Mason employees (faculty, staff, and student workers) are required to use 2FA.

To log in to CAS or the VPN, Mason employees will enter their NetID and Patriot Pass password (first factor) and confirm their identity using a physical device (second factor). The physical device may be a smartphone, tablet, mobile phone, landline phone, or Yubikey.

All users of Mason’s enterprise VPN must adhere to:

Faculty and Staff members must also adhere to:

How to Get this Service

Enrollment instructions are available at First time users can follow the Getting Started checklist.

If you have already enrolled, there are additional instructions and resources for using 2FA at Mason:

There is no charge for this service.


This service is available 24/7, excluding planned outages, normal maintenance windows, and unavoidable events. Maintenance windows are Sundays from 7 to 11 a.m. but may be extended to 2 p.m., if needed. If maintenance is required outside of these hours, it will be announced on the Planned Outages web page.

Getting Help

Assistance for all IT Services is available through the ITS Support Center:

Phone: 703-993-8870
Fax: 703-993-3347
Online: Submit a Request
Hours of Operation: Monday thru Thursday, 8:00 a.m. - 10:00 p.m.
Fridays, 8:00 a.m. - 5:00 p.m.
Saturday, 10:00 a.m. - 2:00 p.m.
Sunday, 2:00 p.m. - 10:00 p.m.
Walk-in Support
Fairfax Campus*:
Innovation Hall, Room 226
(*closed Thursdays 3:00 p.m. - 4:00 p.m. for team meetings)

Last modified date: April 6, 2018