Two-factor Authentication (2FA) – Top Asked

What is your scenario?

1. I am a new student / staff.  How to register my account for 2FA?
   Please refer to the step-by-step guide. In case you haven’t collected your OnePass Account, please:
   Student – refer to step 1 of the new student guide.
   Staff – refer to step 1-2 of the new staff guide.
2. I was unable to complete the registration and now I cannot log in to my email. What can I do?
   
   
   This may happen if the registration is not completed on time, or your computer / browser freezes during the registration.
   Please refer to the step-by-step guide for resolution.

1. I got a new phone.  How to transfer my 2FA account to the new device?
   Please refer to the step-by-step guide.
2. I do not have my phone on hand / out of battery.  How to get around the 2FA login prompt?
   Please refer to the step-by-step guide.
   
3. How to check my email after 2FA enrollment?
   Visit CUHK Office 365 using any web browser. During login, you need to verify your identity by simply respond to a push message or enter a passcode. For details, please refer to the step-by-step guide.
4. How to log in VPN after 2FA enrollment?
   You will receive a push message automatically after entering your username and password.  This is slightly different from other web application systems (such as email) in which you can choose to push a message or enter a passcode. Please make sure your mobile device has a stable Internet connection when you’re connecting to VPN.Refer to user guides below, particularly the No Push Messages section if you did not receive a push message during the connection.CUHK VPN: Windows | Mac | iOS | Android
   SSL VPN: Windows | Mac | iOS | Android

1. I have a departmental / project / organization account.  How to setup 2FA for my colleagues / teammates?
   Please refer to the step-by-step guide.
2. Can I use the same mobile phone to authenticate my staff / student account and project / organization account?
   Yes, you can configure multiple accounts in Duo Mobile App for 2FA authentication.
   Please refer to this knowledge article for details.
3. I do not have my phone on hand. How to get around the 2FA login prompt?
   Please check if you still have the Rescue Code saved when you first enroll into 2FA for the Departmental / Project / Organization account. If so, you can use it to generate the Bypass Code by following the steps below:
   1. Visit https://duo.itsc.cuhk.edu.hk/ using any web browser.
   2. After signed-in using the Departmental / Project / Organization account, click BYPASS CODE tab > I HAVE A RESCUE CODE ON HAND. > insert one of the saved  Rescue Code > SUBMIT.

   Otherwise, please contact us for assistance.

1. Can I use Duo 2FA from mainland China and overseas?
   Yes, and specifically:
   • Push message works when your mobile phone is connected to the Internet
   • Use passcodes generated in Duo Mobile app if your phone is not connected to the Internet
2. I received an authentication request, but I am not signing in.  What should I do?
   That means someone may know your password.
   • For personal account: decline the request and change your OnePass password immediately
   • For departmental / project / organization account: decline the request, ask if your colleagues / teammates sent out the request by error.  Change the account’s password if in doubt

1. Which mobile phone support DUO Mobile app?
   • Most modern iPhone and Android devices support DUO Mobile.
   • Please note that Huawei devices are not supported.
   • Please refer to this knowledge article for more information, and what you could do if you have an unsupported device.