The following email announcement was sent to most Rutgers students on March 8, 2022.
Dear Rutgers students:
Cyberattacks against universities are growing more common, more sophisticated, and more devastating. Universities across the nation are dealing with this issue, and we need to do everything possible to protect Rutgers and its people.
To protect Rutgers’ data and information security, the university will now require all students to use two-step login with Duo to access most services and tools requiring a NetID login. This requirement is already in place for Rutgers faculty, staff, student workers, and others. Starting in April, this requirement will apply to all Rutgers students.
If you do not currently use Duo, ENROLL NOW to protect your information.
If you have previously enrolled in Duo, you do not need to take any action at this time. Starting in April, you will be required to use Duo for additional services and tools requiring a NetID, including Canvas, myRutgers, and Microsoft Office.
What is changing?
With the requirement to use two-step login with Duo, you will need to use your NetID password and another method—typically, a smartphone with the Duo app—to verify your identity when logging in to Canvas, myRutgers, Microsoft Office, OneDrive, ScarletMail, Zoom, and most other services requiring a NetID. This reduces the risk of anyone but you accessing your account, even if your password has been compromised.
Why is this needed?
Using two-step login with Duo protects your information and makes the university more secure. By using two-step login, you’re helping to protect yourself and the university from hacking, phishing, and other cyberattacks.
Rutgers is far from alone in requiring two-step login. Two-step login with Duo is required by many major universities, including Harvard, Michigan, and scores of others.
What do I need to do?
If you do not currently use Duo, ENROLL NOW. If you do not enroll before the requirement goes into effect in April, your access to critical IT services at Rutgers may be disrupted. After you enroll in two-step login with Duo, your Rutgers account will be protected by this technology starting on the day you enroll.
If you currently use Duo for some Rutgers services, such as Rutgers Connect or the Rutgers Virtual Private Network (VPN), you do not need to take any action at this time. When the requirement goes into effect in April, you will be prompted to use Duo for access to additional Rutgers services, such as myRutgers and ScarletMail.
When is this happening?
The requirement will go into effect for students on a rolling basis during April. Additional reminders will be shared with you before the requirement goes into effect.
What should I do when I am not able to use my mobile device for Duo?
Other options for confirming your identity are available if you are not able to use your mobile device. Please review the information for using Duo in exam rooms or other locations in which the use of a mobile device may not be allowed.
Thank you for doing your part to help keep the university secure. At Rutgers, security is everyone’s responsibility.
Senior Vice President and Chief Information Officer
Guy J. Albertini
Associate Vice President and Chief Information Security Officer