1. Two-Step Verification
Presenter
DATE

2. What is Two-Step Verification?
A simple and very effective security feature used with HarvardKey to help protect your Harvard account even if your password is stolen
Designed to make it more difficult for an impersonator to use Harvard credentials to access our systems
Uses a second device, commonly a mobile phone, to verify your identity 1
Login to HarvardKey 2
Verify with Duo
Help Keep Cyber Criminals Out

3. Why Require Two-step Verification?
11/14/2018
Why Require Two-step Verification?
Harvard is a high priority target for hackers, including nation-states
Stolen Harvard credentials are used to gain unauthorized access to systems
This step will greatly enhance our information security, and help to protect, for example:
SSN and direct deposit information
research data and intellectual property
faculty, staff, and student personal information
Even if you don’t have direct access to sensitive information beyond your personal data, a cybercriminal who steals your account can leverage it to access additional Harvard information and systems.
Harvard is a high priority target for hackers, including foreign nation state-sponsored entities who attempt to access University systems with ever-increasing sophistication and frequency. Two-step authentication is designed to provide an extra level of security, and to make it more difficult for an impersonator to use Harvard credentials to access our systems. This step will greatly enhance our information security, and help to protect direct deposit information, research data, and intellectual property, as well as faculty, staff, and student personal information.
Your personal data like direct deposit account number and your Social Security Number. If a cybercriminal reaches this information, they can divert your paycheck or open new accounts in your name.  
Your University data like sensitive research and administration information. The theft of this kind of information can result in lost grants, harm to critical research initiatives, and the exposure of private information about Harvard and its community.
Other people's data at Harvard. Although you may not have direct access to sensitive information beyond your personal data, a cybercriminal who steals your account can leverage it to access additional accounts and systems that hold other people's information at Harvard.
At Harvard, we detect almost 500 compromised accounts every month that are actively being abused/used to access Harvard resources – two-step verification will drastically reduce this number

4. When Will This Be Required?
huit.harvard.edu/twostep/schedule for most up to date
Population
Required by…
Users of HUIT VPN service
September 28
Harvard Graduate School of Design
Central Administration, Inter-faculty Initiatives, Allied Institutions
October 5
Radcliffe Institute for Advanced Study
October 12
Harvard Divinity School
Harvard Division of Continuing Education (faculty/staff only)
Faculty of Arts and Sciences, Paulson SEAS
October 19
T.H. Chan School of Public Health
November 1
Harvard Medical School (quad only)
Graduate School of Education
November 17
Harvard Business School, Harvard Business Publishing
Harvard Kennedy School
Harvard Law School

5. More information and step-by-step instructions:
Questions/Concerns
More information and step-by-step instructions: