Penn WebLogin two-step verification
Protect your PennKey by using both your password and a code generated on your phone.
These pages reflect the changes that will be made to the service
on April 12, 2014:
In a release planned for later in April, Browser trust will be changed to persist indefinitely, as long as the browser is used to log in at least once in the past 30 days.
- Adding a phone: will be easier - it will no longer be necessary to
opt out first;
- Enrolling a hardware token: will be easier - just buy the token
at the Computer Connection, and enroll by entering its serial number; and
- Reporting Enrollment: will be possible on-demand for organizations
wishing to promote enrollment of their members.
How it works
- Enter your PennKey and password as usual.
- When prompted, enter a code from your phone or other device.
- Make your browser trusted (optional). If no one else uses that browser, you only need to enter a code if you haven't used it to log in during the past 30 days.
Why you should use it
Two-step verification dramatically reduces the risk of someone stealing your data and your Penn identity. Even if they acquire your password, they still can't log in unless they also have your device.
Opt in (takes about 15 minutes)
Step-by-step instructions for enrolling in two-step verification, or
re-enrolling if you've previously opted out of the service.
Add a phone or device, opt out of the service, create or edit your profile, generate printable
single-use codes, untrust previously trusted browsers, view your recent
two-step verification activity, or help a friend who's having trouble
Watch our fun, quick videos to learn about two-step verification and how to use it!
Trouble logging in? If you've logged in during the past 30 days using a different browser and
checked the "Trust this browser" box,
try using that browser. Otherwise see Trouble logging in? for self-help options.
Review the FAQ.
If you experience problems not resolved by the resources above, contact
your local support provider (LSP).
Note: Your LSP will need to verify your identity, so before contacting your
LSP you should be prepared to show them your PennCard in person, or be at
your phone number of record to receive a callback, or be able to receive an
email with an arbitrary "secret" and be able to receive a phone
callback (at any phone number you give the LSP).