Using MFA when you log in

Find out how to log in to your University IT account using multi-factor authentication (MFA).

On

Set up MFA

Before logging with MFA you need to set up MFA for your account. If you don’t you will get locked out of your account.

Logging in

To log into your University IT account, follow the steps below.

If you are using High Performance Computing (HPC) follow the additional HPC login guidance.

1 - Log in to MUSE

Click the ‘Log in to MUSE’ link at the top of the page, then enter your University username and password. Click 'Log in'.

2 - Duo MFA check

On the Duo Security Login page, select 'Send me a push' or 'Enter a passcode'. This will depend on the option you chose when you set up MFA. Passcodes let you log into your account when your device is without an internet connection.

3 - Send me a push

Check the Duo Mobile app on your mobile device and select 'Approve to authenticate'.

3 - Enter a passcode

If you use the Duo Mobile app

  1. Open the app on your mobile device. 
  2. Select ‘Show’ to get a one-time passcode.
  3. On the Duo Security Login page, click ‘Enter a passcode, then type in the passcode and click ‘Log in’.

If you use a hardware token

  1. Press the button on your hardware token to generate a new passcode.
  2. On the Duo Security Login page, click ‘Enter a passcode, then type in the passcode and click ‘Log in’.

You will then be logged into your University IT account and directed to the Student or Staff hub.

Receiving unexpected Duo Push notifications

If you receive a Duo Push notification but you aren't trying to log in, your password may have been compromised. Someone may be trying to log in to your University IT account.

You must deny the request and report it to the IT help and support on +44 114 222 1111 immediately.

Lost or stolen MFA device

If the phone or hardware token you use for MFA is lost or stolen you must contact IT help and support immediately on +44 114 222 1111. They will prevent the device from being used for MFA to secure your account.

Remember me for 7 days

You can reduce how often you need to verify your login with Duo, by using the 'Remember me for 7 days' feature. 

To enable 'Remember me for 7 days', tick the box when entering your passcode on the Duo Security Login page.

‘Remember me for 7 days’ cannot be used if you use ‘Duo Push’ to receive a notification from the Duo Mobile app to verify your login. If you have automatic Duo Push enabled, do following:

  1. Select 'Send me a push'
  2. Select 'Cancel' (at the bottom of the page)
  3. Select 'Remember me for 7 days' (tick box)

'Remember me for 7 days' also cannot be used if you are using:

  • a different device or browser to the one you were using when you selected 'Remember me for 7 days'
  • a browser that blocks third party cookies
  • private browsing, as the browser won’t store any cookies to remember your login
  • a VPN as the connection won’t store any cookies to remember your login 
  • an application that accesses sensitive or protected information

High Performance Computing (HPC) login guidance

If you use HPC, read guidance on:

Accessing MFA-protected HPC systemsTips for working with MFA on HPC systems

Related information

Multi-factor authentication (MFA)