2-Step Verification

Two-step verification provides an extra layer of security for your UNLVMail account. It requires you to use your password and a second verification method to protect your account from unauthorized access. You must enroll in 2-step verification by December 15, 2020.

Enable 2-Step Verification

How can I turn it on?

Click on the steps below to see detailed instructions on how to set up 2-Step Verification, or download the full instructions to print.

Step 1 - Enable 2-Step Verification for your account

  1. Go to the 2-Step Verification page. You may be prompted to sign in with your UNLVMail account.
  2. Click on Get Started.
  3. Follow the step-by-step instructions. You will be asked to set up your mobile phone to be used for 2-Step Verification.

Note: After enabling 2-Step verification, you may be prompted to sign in to your Gmail, Google Chrome, and your Google accounts on your mobile devices.

Step 2 - Generate backup codes for when you do not have access to your phone

If you do not have access to your phone, such as when you are traveling, you can sign in with a back up code. To generate your backup codes, do the following:

  1. Go to your 2-Step Verification settings page. You may be prompted to sign in with your UNLVMail account.
  2. Click on SET UP under Backup codes.
  3. Print out the codes and place it in a safe and accessible place like a wallet, purse, or fanny pack.

Step 3 - Generate an app password for older desktop and mobile applications

To help keep your account secure, use "Sign in with Google" to connect applications to your UNLVMail Account. Some apps you are using do not offer this option, such as older versions of Microsoft Outlook, macOS Mail, and iOS Mail. When you try to sign in to those older applications with your email address and password, you may receive incorrect password errors even when you are typing in your correct UNLVMail password. To sign into these types of apps after enabling 2-Step verification, you will need to generate a unique app password for each of those applications. To generate an app password, do the following:

  1. Go to the App passwords page. You may be prompted to sign in with your UNLVMail account.
  2. Select the app and the device it's on and click Generate.
  3. A screen will appear with the app password. Follow the on-screen instructions to use it with your app.


    Note: This is a unique, one-time password that you DO NOT need to remember. DO NOT write it down or share it with anyone. You can generate new passwords through the app password page whenever you need one, even for an application that you have authorized before.

After you have enabled 2-Step Verification, signing in to your UNLVMail account will work a little differently:

1. Sign in to your UNLVMail account
Visit gmail.com and sign in with your UNLVMail email address and ACE password as usual.

2. Verify your login attempt
You will be asked to verify your login attempt, like a six-digit code or a prompt (depending on the verification method you chose), which you will receive from Google on your phone.



Note: See the FAQs below for alternative methods of authentication besides verification codes via text or a phone call.


FAQs

How do I add my computer as a trusted device so that I am not prompted to verify my login attempt every time I sign in?

You can add your computers as trusted devices so that you are only prompted for a verification code when you sign in to those computers occasionally (approximately once every 30 days). To add a computer to the trusted device list, sign in to your UNLVMail account on that computer and check the box Don’t ask again on this computer when it asks you for a verification code.

After approximately 30 days, you will be asked for a verification code again and you can check the box to extend it for another 30 days.

Note: Do not add a public or a shared computer as a trusted device.

I turned on 2-Step Verification and an app on my phone or computer stopped working, what can I do?

Some desktop and mobile apps like Microsoft Outlook, Mac Mail, and Mail on your iPhone do not support 2-Step Verification and you may receive incorrect password errors even when you are typing in your correct UNLVMail password. To get your apps working again, you will need to generate a unique app password for each of those applications. To generate an app password, do the following:

  1. Go to the App password page. You may be prompted to sign in with your UNLVMail account.
  2. Select the app and the device it is on and click Generate.
  3. A screen will appear with the app password. Follow the on-screen instructions to use it with you app.

    Note: This is a unique, one-time password that you DO NOT need to remember. DO NOT write it down or share it with anyone. You can generate new passwords through the app password page whenever you need one, even for an application that you have authorized before.

Will enabling 2-Step Verification affect those that help manage my email messages?

If that person accesses your email via mail delegation, enabling 2-Step Verification will not affect their access since they do not sign in directly to your account.

However, if that person accesses your email by signing in directly into your account, they will not be able to do so after you have enabled 2-Step Verification. As an alternative, you need to add them as a delegate so that they can continue to manage your email messages.

Add a delegate to your email account

Delegates can read messages sent to you, compose and reply to your messages, and delete your messages. To add a delegate to your email account, do the following:

  1. From your inbox, in the top right, click Settings and then See all settings.
  2. Click the Accounts tab.
  3. In the "Grant access to your account" section, click Add another account.
  4. Enter the email address of the person you want to add.
  5. Click Next Step and then Send email to grant access.

The person you added will get an email asking them to confirm. It may take up to 24 hours for you to see them as a delegate after they confirm.

Note: The invitation expires after a week.

What are the alternative authentication methods besides verification codes?

Instead of having a verification code sent to your mobile phone, you can choose these alternative methods of authentication:

Google Prompt
Instead of a verification code, Google can send a notification prompt to your mobile phone. The prompt will ask if you are trying to send in like this:

Follow Google's instructions on setting up Google Prompt on your iOS or Android devices to turn on this feature.

Notes:

  • An Internet connection is required to use Google Prompt
  • iPhone users will need to install the Google Search app or the Gmail app to use Google Prompt
  • You cannot have Security Keys and Google Prompt enabled at the same time

Install Google Authenticator
Instead of having a verification code sent to your mobile phone via text, you can install the Google Authenticator app and use it to generate a verification code. The benefit of using the app is that you do not need Internet connection to use it.


Learn more about Google Authenticator and how to install it on Android and iOS devices.

Security Key
A Security Key is a special kind of dedicated USB device that you can use in place of a verification code. Rather than typing a code, you insert the Security Key into your computer’s USB port and tap it when prompted in Chrome. You can use the same Security Key for multiple Google accounts and on any computers with the Google Chrome browser. Please contact the IT Help Desk if you have any questions about purchasing a Security Key.

I received a verification code but I am not trying to sign in to my account. What should I do?

If you receive a verification code that you were not expecting, your account could be compromised. Contact the IT Help Desk immediately so that we can make sure your UNLVMail account is secured. You should not ignore unexpected verification codes, as it could allow the person unauthorized access to other UNLV systems.

Does turning on 2-Step Verification protect my other UNLV accounts (e.g., Webcampus, eduroam)?

No. 2-Step verification works only when you are signing in to your UNLVMail account and will not protect your other technology accounts like Webcampus and eduroam.

How do I register more than one phone (backup phone)?

You can add another phone number to receive your verification code for the times when you do not have your primary phone with you. For example, you can add your home phone as a backup phone for when you have forgotten or lost your mobile phone. To add a backup phone, do the following:

  1. Go to your 2-Step Verification settings page. You may be prompted to sign in with your UNLVMail account.
  2. Click on ADD PHONE.
  3. Type in your phone number and your option for how to get the code. If you are adding your home phone, select Phone Call.
  4. Click DONE. A verification code or a phone call will be sent to that phone number.

To have a verification code sent to your backup phone instead of your primary phone, do the following:

  1. Sign in to your UNLVMail account using your email address and password as usual.
  2. When you are asked for your verification code, click on Try another way to sign in.
  3. Click Get a phone call with a verification code at [Backup Phone Number].
  4. A verification code will be sent to your backup phone.
  5. Enter the verification code to complete the sign in process.

What if I forgot or lost my phone?

If you do not have your mobile phone with you, you can use your backup phone or backup verification codes to sign in. To use your backup phone or codes to sign in, do the following:

  1. Sign in to your UNLVMail account using your email address and password as usual.
  2. When you are asked for your verification code, click on Try another way to sign in.
  3. Click Get a phone call with a verification code at [Backup Phone Number] OR
    Enter one of your 8-digit backup codes.
  4. Enter the verification code to complete the sign in process.

If you did not setup a backup phone or have backup codes, please contact the IT Help Desk at 702-895-0777 and we can assist you with signing in to your account.

What if I replaced my mobile phone or phone number?

If you have replaced your phone and kept the same phone number, you do not need to re-register your phone to work with 2-Step Verification.

If you have changed your phone number, you will need to register your new phone number to work with 2-Step Verification. Do this by going into your 2-Step Verification settings page and updating your phone number under Voice or text message.

What if I am traveling and might not receive data or messages sent to my phone?

We recommend that you set up alternate verification methods that do not require text message or phone data, such as backup codes or Google Authenticator.

Install Google Authenticator
Instead of having a verification code sent to your mobile phone via text, you can install the Google Authenticator app and use it to generate a verification code. The benefit of using the app is that you do not need Internet connection to use it. Learn more about installing Google Authenticator.

Generate Backup Codes
To generate your backup codes, do the following:

  1. Go to your 2-Step Verification settings page. You may be prompted to sign in with your UNLVMail account.
  2. Click on SET UP under Backup codes.
  3. Print out the codes and place it in a safe and accessible place like a wallet, purse, or fanny pack.

To use a backup code, do the following:

  1. Sign in to your UNLVMail account using your email address and password as usual.
  2. When you are asked for your verification code, click on Try another way to sign in.
  3. Click Enter one of your 8-Digit backup codes.
  4. Enter your backup code.
  5. Mark the code as used since each code can only be used once.

How can I turn off 2-Step Verification?

We do not recommend that you turn off 2-Step Verification, but if you choose to so, you can follow the instructions below:

  1. Go to the 2-Step Verification page. You may be prompted to sign in with your UNLVMail account.
  2. Select Turn off 2-Step Verification.
  3. Click OK when you see the confirmation window.

After you have turned off 2-Step verification, you will want to revoke the app passwords you created for desktop and mobile apps like Outlook and Mail for your iPhone. You can revoke your app password by doing the following:

  1. Go to the 2-Step Verification page. You may be prompted to sign in with your UNLVMail account.
  2. Click on App passwords. You may be prompted again to sign in with your UNLVMail account.
  3. Click Revoke for any listed applications.

Note: After revoking your app passwords, use your UNLVMail password the next time you are accessing those apps.