Two-Step Verification (PennO365 Email Accounts)

Two-Step Verification for PennO365 email accounts provides an added layer of protection for your accounts. After you log in with your username and password, you'll be prompted to verify your identity -- the second step -- using a device in your possession such as a mobile phone or key fob.

PennO365 email accounts are available for Faculty and Staff.  Undergrad and MBA students should see the article on Two-Step Verification for Google Accounts. PhD students should contact their Academic Distributed Representative to be enrolled. 

Before You Start 

  • This article applies to Staff and Faculty who have PennO365 Accounts.
  • Make sure you have the following before you start this task: 
    • an active account (e.g. PennKey, PennO365)
    • administrative access to your smartphone (if you plan to install the recommended smartphone apps)

Note: Google Accounts

You can also enable two-step verification for personal Google accounts. For instructions on how to do so, please see our Two-Step Verification (Google Accounts) article.

Note: Two-Step Methods

For more information regarding various options for Two-Step Verification, please see our Two-Step: Methods of Verification article.

Two-Step Required for Wharton Penn O365 Email Accounts

Two-Step Verification is critical for online security, and will soon be required for all Wharton PennO365 email accounts. The policy is being enforced in phases for Wharton's PennO365 accounts, and other schools at Penn will be following suit over the next several months.  If you haven't already enrolled, look for communications from your IT team.  Please enroll before your deadline to avoid being locked out of your account. Two-step verification is critical to account security.

Enroll Your PennO365 Email Account

If you would like to enroll in PennO365 Email Two-Step Verification before the deadline, you'll need to reach out to your IT representative (see below).  All faculty and staff will be enrolled, in phases, during Fall 2019 and Spring 2020. If you don't request enrollment in advance, your IT team will notify you of the date your Two-Step Verification will be enabled.

Logging into PennO365 using Two-Step Verification

Logging into PennO365 using Two-Step Verification is very similar to using PennKey Two-Step verification.  

Note: Be sure that the domain selected is “”.  Some Windows systems may substitute "Wharton" when logging into a PennO365 account. If this happens, change the domain to “”.

When you log into your PennO365 Email account, you will see a window like this:

two-step login screen

We highly recommend using the Duo Mobile app for push notifications as it is both more secure and more convenient. (These instructions assume you are going to use the Duo Mobile app).

  1. Choose your device from the dropdown menu
  2. Choose one of the following options: 
    • Send me a Push to send a Push notification to a smartphone with the Duo app installed and configured for use with Two-Step Verification.
    •  Enter a Passcode from a text message, one-time-use code, authenticator app, or a SafeID fob.
    •   Call me to send an automated phone call to the selected phone number. 
  3. Check  the Remember me for 30 days check box if you trust your browser or client and want it to remember you for 30 days before requiring use of Two-Step again. (You will need to do this ON EACH BROWSER/DEVICE you use.)

Download and Install an Authenticator App

Installing an app on your smartphone makes the two-step process very simple.  We recommend doing this, and choosing the Duo app, which allows you to receive automated push notifications that you tap and approve.

Getting New Backup Codes

The following instructions assume that you've already setup Two-Step for your Pennkey account. If you have not, please follow the  instructions to Enroll Your Pennkey.


Faculty & PhD Students:  Academic Distributed Representatives

Staff: Administrative Support

Students: Wharton Computing Student Support