Two-Step Verification (Pennkey Accounts)

Two-Step Verification is a service that provides an added layer of protection for your accounts. After you log in with your username and password, you'll be prompted to verify your identity -- the second step -- using a device in your possession such as a mobile phone or key fob.

Before You Start 

Make sure you have the following before you start this task: 

  • an active account (e.g. PennKey, Google)
  • administrative access to your smartphone (if you plan to install the recommended smartphone apps)

Note: Google Accounts

You can also enable two-step verification for both personal and student Google accounts. For instructions on how to do so, please see our article here.

Note: Two-Step Methods

For more information regarding various options for Two-Step, please see our Two-Step: Methods of Verification article.

Two-Step Required at Penn

Two-Step Verification will soon be required for all Pennkey accounts and for students' Google@Wharton accounts. The policy is being enforced in phases for all PennKey accounts -- if you haven't already enrolled, look for communications from your Computing teams.  Please enroll before your deadline to avoid being locked out of your account(s). Two-step verification is critical to account security.

Enroll Your Pennkey

During this process you will be prompted to choose a method for Two-Step Verification. We highly recommend using the Duo Mobile app for push notifications as it is both more secure and more convenient. (These instructions assume you are going to use the Duo Mobile app).

Getting New Backup Codes

The following instructions assume that you've already setup Two-Step for your Pennkey account. If you have not, please follow the above instructions under Enroll Your Pennkey.


Faculty & PhD Students:  Academic Distributed Representatives

Staff: Administrative Support

Students: Wharton Computing Student Support