What is two-step verification or multi-factor authentication (MFA) and why should I enable it?

Two-step verification is a security process that requires users to provide two (or more) different types of information to verify their identity when accessing an account or system. Instead of just entering a password, two-step verification adds an extra layer of protection by asking for something you have (like a smartphone or a security token) or something you are (like a fingerprint). This way, even if someone steals your password, they will still need the additional information to access your account, making it much harder for unauthorized users to gain access. Two-step verification helps keep your personal and sensitive information safer online.

How do I set up two-step verification for my account?

In the User Preferences section of the website, a new tab has been added called “Two-Step Verification.” On that page, you will enter a name for the device you will use for this process and click “Continue.” The following screens will guide you through connecting that device. The next time you log in, two-step verification will be enabled, and you will be required to enter a one-time password from your chosen authenticator app.

Why isn't the “Remember this Device” setting working for me?

The “Remember this Device” option only works until browser cookies have been deleted. Many companies automatically apply a setting to browsers that forces the removal of browser cookies every time the browser is closed. Check with your local IT department to see if your company applies this setting.

What is a Browser Cookie?

A browser cookie is a small piece of data that websites store on your computer when you visit them. It helps the website remember things about you, like your login information or preferences, making your browsing experience smoother. Not to be confused with a regular cookie which is a small, sweet cake, typically round, flat, and having a crisp or chewy texture. All this talk about cookies is making me hungry!

How do I disable my two-step verification?

To disable the two-step verification, please remove all enabled devices by going to “User Preferences” in ICAT Online. Please note, this setting will eventually be mandatory to continue to login to ICAT Online.

What should I do if I lose access to my two-step verification device?

If you lose access to your Two-Step Verification device, after entering your normal username and password, the Two-Step Verification screen that appears will provide a link for “Lost access to your authentication device?” If you click that link, the screens that follow will guide you through regaining access by having a recovery code emailed to you or using a second device if you have connected multiple devices.