Multi-Factor Authentication (MFA), Yubikey, Purchase and Use

Important Note:

The USB Security Key sold by the Webstore (Security Key NFC by Yubico) uses modern and secure WebAuthn/FIDO2 authentication standards and is supported by Duo Universal Prompt.

These security keys currently DO NOT work with the UIC Virtual Private Network (VPN).

To Register your USB Security Key follow the instructions in the section below .

Important info regarding Yubikey:

The Yubikey 5 sold by the Webstore are compatible with the Duo Universal Prompt. Please check the University of Illinois Webstore for more details on Hardware Token Options and pricing.

Users can also bring their own WebAuthn/FIDO2 compatible security keys for authentication through the Duo Universal Prompt, with the following caveats:

• Similar to security keys sold through the Webstore, we strongly recommend users to set up a backup authentication method.
• Support is limited for security keys not purchased through the Webstore.

Registering and Using your Yubikey

Important: These security keys currently do not work with the UIC Virtual Private Network (VPN).

Please follow the instructions for your device: Multifactor Authentication - How to set up a Security Key (from Webstore or B.Y.O.D.) in Duo

Additional Information

Forgotten hardware tokens (Yubikey)

If you forgot your token and cannot log into the system requiring multi-factor authentication, visit NetID Center - Get temporary passcode at the bottom of the page.

Lost hardware tokens (Yubikey)

If you lose your hardware token, you should immediately sign into the NetID Center using an alternate method or by generating a bypass code. Once in the NetID Center, click on "Manage my 2FA". Here, select the lost token and click the red trash can icon to remove it. This way the token cannot be used by someone else to access your account. If you find the token, you can follow the above steps again to register it to your account once more.

Registering a Yubikey to another employee

Tokens can be reassigned for use by another employee.  The new owner of the token can register it to themselves by following the instructions listed above.

Replacement information: 

Please note: Faulty tokens purchased from the Webstore will be replaced up to 6 months from the time of purchase.  Please reference your purchase receipt number when requesting a replacement.