Two-Step Verification (PennO365 Email Accounts)
Last Modified on 07/31/2023 3:15 pm EDT
Two-Step Verification for PennO365 email accounts provides an added layer of protection for your account. After you log in with your username and password, you'll be prompted to verify your identity -- the second step -- using a device in your possession such as a mobile phone or key fob.
PennO365 Two-Step Verification uses the same technology as PennKey Two-Step Verification, so PennO365 will use your already configured PennKey Duo app, or other code generator.
Before You Start
You will need an active Faculty or Staff account (e.g. PennKey, PennO365).
For more information about choosing between Two-Step methods, see our Two-Step: Methods of Verification article.
Getting Enrolled
1) Enroll Your PennO365 AccountTo enroll in PennO365 Email Two-Step Verification follow the instructions below.
- Log out of your PennO365 account on all of your devices.
- Go to the PennO365 Two-Step Verification Enrollment portal.
- Authenticate with your PennKey and PennKey password.
- Click the yellow Enroll button.
After you have enrolled your status will indicate that you are enrolled. 
After you have completed enrollment, wait 15 minutes and then open Microsoft Outlook using the desktop application, the app on your smartphone, or the Outlook web client. Sign into your account using your Microsoft account and password. After you have successfully signed in you will be prompted to initiate, or generate, a Two-Step Verification code. With Two-Step for PennO365 you must initiate the verification by clicking Send Me a Push or Enter a Passcode. | 2) Logging into PennO365 Using Two-StepLogging into PennO365 using Two-Step Verification is very similar to using PennKey Two-Step verification.
Note: Be sure that the domain selected is upenn.edu. Some Windows systems may substitute Wharton when logging into a PennO365 account. If this happens, change the domain to upenn.edu. When you log into your PennO365 Email account, you will see a window like this: 
We highly recommend using the Duo Mobile app for push notifications as it is both more secure and more convenient. (These instructions assume you are going to use the Duo Mobile app). - Choose your device from the dropdown menu
- Choose one of the following options:
- Send me a Push to send a Push notification to a smartphone with the Duo app installed and configured for use with Two-Step Verification.
- Enter a Passcode from a text message, one-time-use code, authenticator app, or a SafeID fob.
- Call me to send an automated phone call to the selected phone number.
- Check the Remember me for 30 days check box if you trust your browser or client and want it to remember you for 30 days before requiring use of Two-Step again. (You will need to do this on each browser/device you use.)
|
Making Two-Step Easy
Download and Install an Authenticator App
Installing an app on your smartphone makes the two-step process very simple. We recommend doing this, and choosing the Duo app, which allows you to receive automated push notifications that you tap and approve.
Note: You will need administrative access to your smartphone to complete this task. On your phone or mobile device: Download the appropriate app for your platform by visiting the link below with your mobile device. If you already have an authenticator app installed, you don't need to install anything else. Ignore any set-up instructions specific to Gmail, Google, or other non-Penn accounts. Simply download the free app and install it on your device, then enroll in Two-Step Verification.
| Generate Backup CodesIf you lose/get locked out of your authentication device, two step can make it difficult to login. That's why you always want to keep backup codes. These codes are used in case all of your Two-Step verification methods fail.
- Go to the PennKey Two-Step enrollment application at http://twostep.apps.upenn.edu
- Click Manage Settings.
- Log in with your PennKey username and password.
- Click Print One-Time Codes.
- 20 one-time codes are displayed. Click Print to print out the codes, and be sure to store them in a safe place.
|
Troubleshooting
If you get an email on your mobile device that says Your e-mail access has been blocked follow these directions to remove/re-add your PennO365 account onto your device.
Questions?
Students - Wharton Computing Student Support
Faculty - Academic Distributed Representatives
Staff - Administrative Support
