Google 2-Step Verification (Multi-factor Authentication)

Google’s 2-Step verification adds a second step to your login process to confirm your identity.

You’ll use:

• Your password (something you know), and
• A verification from your phone (something you have).

ECC students will use Google Authenticator for this process. You can confirm your identity by:

• Entering a code sent by text message,
• Answering a verification phone call, or
• Approving a notification through the authenticator app.

Cyberattacks against colleges are becoming more common. Multi-factor authentication adds an extra layer of protection—even if someone has your password. This helps secure your email, files, and ECC systems from unauthorized access.

All ECC students will use Multi-Factor Authentication (Google’s 2-Step verification) to help protect their accounts.

• Students: Google’s 2-Step verification will be optional during the soft launch (November 3, 2025) but will become required for everyone after January 20, 2026.

You won’t need to verify every time you log in—only when:

• You’re using a new device, or
• It’s your first login of the day.

Google’s 2-Step verification is not required when you’re on a campus computer or connected to ECC’s Wi-Fi network.

No. Google’s 2-Step verification will be required for everyone starting January 20, 2026. This is part of ECC’s cybersecurity policy and helps protect your information and the college’s digital systems from phishing and password theft. 

If you don’t have a smartphone or prefer not to use a personal device, Elgin Community College (ECC) offers a portable hardware token that lets you complete Google’s 2-Step verification without needing Wi-Fi, cell service, or an app.

The hardware token generates a secure, one-time code you can enter when logging in, just like the Google Authenticator app.

Students without a device can check out a hardware token from the Renner Academic Library Circulation Desk in Building C, similar to borrowing a Chromebook or graphing calculator.

• Bring your ECC student to check one out for the semester.

Need help requesting a hardware token or getting started with Multi-Factor Authentication (Google’s 2-Step verification)?

Students can request a hardware token from the Library Circulation Desk if they do not own a personal smartphone or choose not to use one. You will need a photo ID when requesting a token.

• For assistance with obtaining a device, please contact the Library Circulation Desk at 847-214-7337 or email circdesk@elgin.edu.
• For assistance with setup or troubleshooting, please contact First Stop at 847-214-7570 or email accessecc@elgin.edu.

Yes, ECC can provide a hardware token that generates a six-digit number to enter when you log on. Open a helpdesk ticket, and we'll arrange to get one for you. Open a Jira Hardware Request

Yes, you can use Duo Mobile as your authenticator app instead of Google Authenticator.

If you log into Microsoft 365 for the first time, you will be prompted to set up a Multi-Factor Authenticator. Follow the instructions on how to add your Microsoft 365 account to the Duo Mobile authenticator app setup.

Follow the instructions on how to access employee email off-campus using the Duo Mobile Authenticator App setup.

No, you are all set up. When you log in, choose the “Duo push” option, and you’ll get the notification to approve, just like in remote access.

Need help requesting a hardware token or support with Duo Mobile?

• Employees who need additional technical support can reach out to the IT Help Desk:
  • Phone: 847-214-7979
  • Email: helpdesk@elgin.edu
  • Open Support Ticket: ECC Requests Portal

MFA (Multi-Factor Authentication) means you’ll use two steps to log in:

• Your password (something you know), and
• A verification from your phone (something you have).

ECC will use your authenticator app to verify your identity by:

• Entering a code sent by text message,
• Receiving a verification phone call, or
• Approving a notification through the Authenticator app.

• Plug it in: The key connects to your computer’s USB port (some models also support NFC for wireless use).
• Press the button: When prompted during login, you simply press the button on the key. This tells the system, “Yes, it’s really me.”
• Generate a secure code (if needed): Some Thetis Keys display or generate a one-time passcode (OTP) — usually a six-digit number — that you can enter when signing in.
• Authenticate instantly: Once you press the button or enter the code, your identity is verified, and you’re logged in securely — no text messages, phone calls, or app approvals required.

Yes, this measure is necessary to enhance the security of the College's systems.

Absolutely not. The application we are asking you to use is only there to receive the challenges and allow you to respond yes or no. It will transmit to us that you did acknowledge or reject the challenge, the time that you acknowledged/rejected it, and the IP address (Note: this can reveal the city and state of your cell phone location) when you acknowledged it.

Beginning November 3, 2025, Elgin Community College (ECC) will begin a soft launch of Google’s 2-Step verification (sometimes called Multi-Factor Authentication) for Google accounts, whether or not you are on campus. Google’s 2-Step verification will become required for all users on January 20, 2026. To prepare: Download the free Google Authenticator app from the App Store (iOS) or Google Play Store (Android) before setup begins.