Configure 2-Step on a new phone


  1. Go to and click “2-Step Verification for Duo”.
  2. Sign in with your Onyen or guest ID.
  3. From the “2-Step Verification for Duo” screen, click “Start setup”.
  4. Verification information:
    1. If you have a social security number (SSN), enter your PID (or click Forgot your PID to look it up), the last four digits of your SSN, and your date of birth (mm/dd/yyyy).
    2. If you do not have a social security number (SSN), enter your PID (or click Forgot your PID to look it up), your date of birth (mm/dd/yyyy), and answer three security questions.
  5. On the “Choose an authentication method” screen, click “Add a new device” on the left side of the frame.
  6. On the “Add a New Device” screen, choose one of the following authentication methods:
    • Call Me to verify with a phone call
    • Enter a Passcode to verify with a text
  7. Choose the Type of Device you are adding.
  8. Enter the same phone number for the device you’re reactivating.
    Note: Duo will automatically recognize the number is registered. Check the box by “This number already exists and will be replaced“.
  9. Click “Continue”.
  10. Choose the type of phone and click “Continue”.
  11. Click “I have Duo Mobile installed”.
    Note: This will only show if you have Duo Mobile installed on the new device. If not you will need to re-install the app, follow the on-screen instructions.

Note: By following the instructions above, this will allow you to receive a QR Code to re-register the device. Please contact the ITS Service Desk by calling 919-962-HELP(4357) if this is not working for you.


When you first sign into an application (i.e. Office 365) that has 2-Step for Office 365 turned on, you will be prompted to set this up. Please follow the prompts carefully.

Depending on your choice, whether it is a phone call, texting you a code, or setting up the Microsoft Authenticator app (either code entry from the app or push notifications).  Whatever you choose Microsoft will set this as your default choice.  This can be changed at any time by accessing your Security Settings.

Setting up 2-Step for Office 365 for the first time:

  1. Go to and at the UNC Login screen, you will see a Setup it up Now button.
  2. On the next screen, you will be given a drop down to choose your default choice on how 2-Step for Office 365 will contact you.
    1. Mobile App (recommended) – Here you can configure your mobile device. Please note only one mobile device may be configured at any given time.
      Decide how you want to verify your sign-in by choosing Receive notifications for verification or Use verification code (these options require you to have the Microsoft Authenticator installed, please see Install Microsoft Authenticator App toggle above).

      1. Receive notifications for verification. This option pushes a notification to the Microsoft Authenticator app on your smartphone or tablet. View the notification and, if it is legitimate, select Authenticate in the app.
      2. Use verification code. In this mode, the authenticator app generates a verification code that updates every 30 seconds. Enter the most current verification code in the sign-in interface.
    2. Office Phone – This option will be pulled from the Business Phone number listed in ConnectCarolina/UNC Directory. If your number is not listed correctly then please visit and update the business phone number.
    3. Phone – You may enter your mobile device number or landline that can be called.
      1. Send me a code by text message sends a text message containing a verification code. Following the prompt in the text, either reply to the text message or enter the verification code provided into the sign-in interface.
      2. Call me places an automated voice call to the phone number you provide. Answer the call and press # on the phone keypad to authenticate.
    4. Click Next, after choosing one of the above options.
    5. Follow the on-screen steps.
    6. Please read the Note below for optional steps.


  • The University recommends setting up an additional authentication method other than the default.  For example, if you set up the Microsoft Authenticator App as the default, setting up a landline (if one is available) would be great.  That way if you lose or forget your mobile device you will be able to authenticate. Please follow the instructions on Accessing or Changing 2-Step for Office 365 security settings to set up the additional method.
  • If you use Outlook 2013, or a Non-Microsoft email client whether is on a Mobile Device (iPhone/iPad or Android) or Computer (Mac or Win) you will need to set up an App Password for that client. Please follow the instructions on Create an App Password to use with Outlook 2013, Mobile Device Email apps (iPhone/iPad (iOS v10 or below) and Android), and Non-Microsoft Email Clients (Mac Mail and Thunderbird) below.