Phishing attempts are at an all-time high, and a single compromised MIDAS account poses a risk to sensitive university data and critical services. As an added layer of protection, we require all faculty, staff and students to log in to ODU services using two-factor authentication.
What is two-factor authentication?
Two-factor authentication adds an additional layer of security to online accounts by requiring you to verify that you are who you say you are. After logging in to an ODU system with your MIDAS ID and password, you'll be prompted to confirm your identity a second time using a physical device in your possession (like a smartphone or token) that's been attached to your account.
Why do I need two-factor authentication?
The truth is, we have seen more professionally organized and sophisticated phishing attacks against our ODU community in the past year than ever before, and passwords are no longer a strong enough protection on their own.
Imagine this: An attacker sends an email to several hundred ODU students. One student - just one - is fooled by the email and unwittingly hands over her MIDAS ID and password. Until we catch the suspicious activity, the attacker has access to all of that student's ODU data.
Or this: An attacker sends an email to several employees, and the message appears to come from payroll. One person - just one - logs in to what he believes to be Leo Online, only to realize later that his account was compromised and his direct deposits have been redirected to the attacker's bank.
Now imagine: An attacker successfully steals your MIDAS ID and password. When he tries to log in, he's asked to provide your second factor. But you have your second factor (your smartphone or token) safely in your possession, so he can't get any further. He remains locked out.
Two-factor authentication adds an additional layer of protection to the personal information and infrastructure entrusted to us.
Sounds good, but will it slow me down?
Two-factor authentication only adds a couple of seconds to your login. But if you regularly use the same computer and web browser, you can use the "Remember Me" feature to save more time.