At Smith College, ITS provides two-factor authentication to help you protect your account information. Two-factor authentication requires you to verify your identity on a second device (such as your phone or other mobile device) before you finish logging into your account.
On devices you trust, you’ll have to go through the process about once a week. If you choose not to trust a device, you will be prompted each time you access a Smith resource from that device.
What does two-factor authentication protect?
Your information in Workday, including your social security number and personal financial information.
Your email communications.
Access to your coursework, research data, and other electronic content, including pictures and chat logs.
Access to cloud-based services.
Authentication through Duo is required for Smith College instructors, staff, and students to help protect account information. This requirement of a second, separate verification step helps keep your account secure even if someone else has your password.
See Cybersecurity for more about protecting your Smith accounts and data.
Change your password immediately and let ITS know.
When you are assigned a Smith account, you need to enroll the account in Duo before you're able to log in and access Smith systems. Follow the steps below.
If you are already enrolled and would like to add more approval methods to your account, see Set Up Additional Devices.
A desktop or laptop computer. You must enroll in Duo from a computer—you cannot enroll in Duo on a mobile device like your smartphone or tablet.
A device to approve Duo authentication requests. Duo provides a layer of security because you set up a second, separate device and use that to prove (or "verify") that you are the person trying to log in to your account whenever there is a login attempt. You will need to decide which type of device (also referred to as an approval method) works for you. We recommend the following:
Duo Mobile installed on a smartphone or tablet (iPad).
If you have a cell phone or an older smartphone that cannot support the Duo Mobile app, a Security Key that you carry with you or keep with your computer may be a good alternative. Contact User Support to discuss your options.
IMPORTANT: When setting up your primary Duo device, use a smartphone or security key that you have convenient access to. Do not use other options such as Touch ID, Chrome on Mac, iCloud keychain, or Windows Hello as a primary method.
From your computer, open a new browser window and go to the Smith Portal or Workday.
Log in with your Smith username and password. The enrollment screen will appear automatically the first time that you access these Smith College applications.
Select Get Started.
Select a method of authentication and follow the prompts to enroll. Per the above recommendation, Duo Mobile is the most common choice. (Note that the Phone number option is not supported at Smith.)
After you have finished setting up your first device, it is recommended that you add a second device. See Set Up Additional Devices for information and instructions.
Got a New Phone?
You'll need to update your devices in Duo. See Have a New Phone below for instructions.
Using Duo Mobile is the most common method used to approve your login attempts. To learn about other methods for approving login requests and see how those work, see Duo Devices.
The Duo Mobile app uses push notifications to alert you to a login attempt and allow you to approve or deny it. Make sure that notifications are turned on for the app in your phone's settings. Here's how it works:
Step 1. When logging into an application through your Smith account, the prompt on the screen will include a three digit code.
Step 2. Open the Duo Mobile app through the push notification on your device and enter the code in the boxes. Note: If you did not receive a notification, you can open the Duo Mobile app directly.
Step 3. Select Verify to confirm. Select I'm not logging in if you didn't initiate the notification - this will notify ITS.
Remember to never approve requests you did not initiate!
If you have downloaded the app, and it's not working to approve your logins, you may need to update your Duo device settings. See How to Add a New Device to add or reactivate your Duo Mobile app.
If you receive an alert from Duo when you are not in the process of logging into a Smith application, DO NOT approve the request. An uninitiated notification indicates that your password has been compromised.
If you DID approve a notification but believe it was not initiated by you:
Change your password immediately. If you use the same password for other accounts, change those as well.
Contact ithelp@smith.edu
If you ignore or deny the notification:
Change your password immediately to be safe.
If you have selected "Deny", you will be prompted to report the request as fraudulent and will receive a follow-up communication from ITS.
We highly recommend adding at least one additional way to approve your login attempts in case you don’t have access to your primary device. Having a backup means you’ll still be able to log into your Smith accounts without contacting IT Support. You can add several devices and use any of them to authenticate with Duo.
Scenarios where your backup device would be helpful include:
You don’t have your phone with you, and you need access to your Smith email or other resources.
You lose your primary device.
You get a new phone and don’t have access to the old phone.
See Duo Devices for a list of available approval methods and to learn how they work.
Any updates to your Duo approval methods must be done by logging into Duo in a web browser. Follow the steps below to make changes.
You can also visit Add or Manage Devices After Enrollment on Duo's help site.
Note: If you have any issues accessing your device settings, contact User Support for assistance.
1. From a computer, open a new private or incognito browser window (this ensures you receive the Duo prompt), and go to the Smith Portal (portal.smith.edu)
2. Enter your Smith username and password.
3. When the Duo pop-up window appears, select Other options (do not approve your login yet).
4. From the list of options, select Manage Devices (typically at the end of the list).
5. Duo will then ask you to verify your identity before you can proceed. Select a method and follow the usual Duo prompts. Once verified, a list of your existing approval methods will display, along with the option to add a device.
6. Select the option Add a device. A list of new valid device types to pick from will display.
7. From the list, choose an alternate method for approving Duo requests and follow the prompts. See Duo Devices for more details about the options.
You'll receive an email from Duo confirming when changes have been made to your devices. This helps protect your account from unauthorized activity. If you receive an email and you have not made any changes in Duo, your account may be compromised. Follow these instructions to change your Smith account password and report the event.
If your new phone has a new phone number (different from what you previously set up in Duo), you will need to add it as a new device. Note: You will only be able to do this if you already have at least one backup device to approve your login and access the Duo settings. If you don’t have a backup device registered, you’ll need to contact ITS User Support.
If your new phone uses the same phone number as your old phone, you can update that device in Duo using these steps.
On your computer, open a new private or incognito browser window to ensure you receive the Duo prompt, and go to the Smith Portal (portal.smith.edu).
Enter your Smith username and password.
When the Duo pop-up window appears, select Need Help? in the bottom left corner.
Under I got a new phone, select the Activate Duo Mobile link and follow the prompts.
To confirm the device was successfully added and to view your other Duo devices, go back to the Manage Devices page.
Refer to Duo’s instructions for more details on adding a new phone.
New phone, same number:
If you have downloaded the app and it's not working to approve your logins, you may need to update your Duo device settings. See How to Add a New Device to add or reactivate your Duo Mobile app.
If you get a new phone, the Duo app must be reactivated. See the Have a New Phone section above for instructions.
If you use the Duo Mobile app to authenticate your account with push notifications, it's important to keep it up-to-date to avoid disruptions in service and security. To learn about alternative methods for approving authentication requests, see Duo Devices.
We recommend enabling automatic updates or updating the app regularly to ensure that you continue to receive notifications. Update the Duo Mobile app through your device’s app store.
To view the OS requirements and latest app version information, refer to Duo's documentation: iOS, Android.
On your mobile device, open Duo Mobile.
At the upper left of the screen, select the three horizontal lines (hamburger icon).
The version will be listed at the bottom, e.g., Version 4.104.0.1 (Android) or 4.104.0.1485.1 (iOS).
What services are covered by Duo?
Any service that uses Smith’s Single Sign-On for authentication will also require Duo for authentication once activated. The most common services included are Smith email, Workday, Smith Portal, Moodle, and the VPN.
I have been granted delegated access to another account from my account. Will I use Duo to access the delegated account?
No. Delegated accounts through your individual Smith account, so you would authenticate with Duo as usual for your account.
I cannot access my Duo-protected primary device or any of my other devices to verify my identity. How can I log in to my Smith account?
Contact the ITS User Support Center at 413-585-4487 or submit a request for IT help to access your account - you will be asked to verify your identity.
Review how to add a backup device, which will allow you to manage devices without IT assistance and to log in if you do not have your primary device.
What's the difference between a primary and backup device?
A primary device should be something you have with you and can use all the time. We recommend using the Duo Mobile app on your smartphone. If you don't have a smartphone, a security key is a good alternative.
I've downloaded the Duo Mobile app. It's asking me to use a QR code or activation code to set up my account, but I don't have either. What do I do?
After you've downloaded the app, it must be added to your devices in Duo before it can be activated. Follow the steps to add it as a new device.
I select “Send Me a Push,” but it’s not showing up on my phone?
Check your phone’s settings to ensure that alerts are enabled for the Duo application. Also, try opening the Duo app to ensure that the push request is reaching your phone. If you got a new phone recently, you must re-register the device with Duo, even if it has the same number. Visit the Have a New Phone section above for instructions. Alternatively, you can use another method, like Duo Desktop, as a backup.
See Duo's troubleshooting tips for iOS and Android.
I want to add another device (or change my settings), but I selected "Trust this device." How do I do this?
The “Trust this device” option is tied to a specific browser on one computer. You can open a different browser and/or log in on a different device, which will require you to authenticate. You will then be able to access the settings for your Duo account and manage your devices. In Chrome and Safari, you can also open an incognito/private window. (Ctrl+Shift+N or Cmd+Shift+N).
What is a security key? Where can I get one?
A security key is a small USB device that you can purchase and plug into your computer’s USB port to authenticate with Duo. It is used to approve Duo requests instead of using a phone. Security keys can be purchased or be requested from ITS for use in special circumstances by submitting a a ticket to User Support or emailing ithelp@smith.edu.
Can I use my computer to authenticate, instead of a phone?
If you cannot use the Duo Mobile app on a smartphone, we recommend getting a security key, which is used to authenticate through the USB port on your computer. Additionally, backup methods like Duo Desktop and Touch ID for Mac work on your computer.
I’m traveling abroad and won’t be able to use cell service. What are my options?
You don't need cell service to get a push from the app on your phone. As long as your device has Wi-Fi connectivity where you are and you have the Duo Mobile app, you will still be able to receive Duo requests. You can also use the Duo for Desktop App, Touch ID, or Windows Hello on your computer as a backup.
If you won't have access to a phone or Wi-Fi, contact User Support to request a security key before you leave. They will help you register the key as a new device. Setup is fast, easy, and does not require a push for verification.
If you’re already away and don’t have other options, contact IT User Support.
Last Updated: 4/17/26