In response to the increasing number of phishing scams impacting the Boston College community, Information Technology Services has implemented a high-security login process for accessing certain secure services that requires two steps to verify the identify of the person logging in.

Get Started

BC 2-Step Verification uses Duo Security technology to confirm your identity using a second device such as a mobile phone, tablet, or landline phone.

You will be prompted to set up BC 2-Step the first time you access a BC 2-Step service.

Recommended Browsers:

The latest versions of Chrome and Firefox are preferred.

DUO Security Logo
  1. Go to bc.edu/manage2step (BC sign-in required).
  2. Click Add a new device.
  3. Follow the online instructions to verify your identity and add your device.

Services that Require BC 2-Step Verification

  • Change BC Password
  • Change Challenge Questions
  • Change Secondary Password
  • Eagle VPN
  • MyBill
  • PeopleSoft HR
  • Peoplesoft Financials
  • Refund Request
  • Slate


Note: In the future, ITS will be expanding the use of 2-Step Verification to other services to help further protect BC accounts.

Related Links

Eagle VPN

BC Password

Duo Mobile App

The Duo Mobile app can be used on smartphones or tablets. Once installed, tap “Approve” on the login request sent to your device. You can also quickly generate login passcodes, even without an internet connection or cell service.

Activate the App on Your BC 2-step Account

  1. Go to bc.edu/manage2step (BC sign-in required).
  2. Click Manage Your Devices.
  3. Follow the online instructions to verify your identity.
  4. Next to the smartphone/tablet device, click Device Options, and then click Activate Duo Mobile.
  5. Follow the online prompts to install Duo Mobile on your device.
DUO Mobile App Icon

Verification Methods

There are four ways to verify your identity with a secondary device.

Duo Mobile App - Push Notification

A push notification is sent to the device, and you can review the request and tap Approve to authenticate. Internet or cellular access is required to use this method.

Duo Mobile App - Mobile Passcode

Authenticate using a passcode generated with Duo Mobile. The app runs on your device so you don't have to have cellular or internet access to authenticate (as you do with push notifications).

SMS Text Passcode

A text message with a seven-digit passcode is sent to your mobile phone.

Phone Call

You receive an automated phone call that requires you to press any key to authenticate. Note: Due to restrictions by the Chinese government, automated phone calls for authentication to +86 numbers are not available.

Secondary Devices

You can use smartphones, tablets, mobile phones, and landlines as secondary devices. Each device has one or more verification methods available.

Lost of Forgotten Secondary Devices

If you don't have access to any of your enrolled secondary devices, contact the BC Help Center at 617-552-HELP (4357) for assistance.