What is multi-factor authentication (MFA)?
...
Cal Poly students, faculty and staff are required to verify their identities with Duo when logging in to any web-based resource that requires a username and password, including My Cal Poly Portal, Canvas, email and calendar, and more. If you have not already set up MFA, you will be prompted to do so when you try to access any resources behind a Cal Poly login. MFA is required for all Cal Poly accounts, except for shared club/department accounts.
...
You can use a mobile phone, a tablet, a landline, a token, Touch ID, or a security key with Duo. The device you choose to authenticate with must first be set up through the My Cal Poly Portal. If at any point you need to change the device you use to authenticate with Duo, you must /wiki/spaces/CPKB/pages/841154565.
...
Any member of the Cal Poly community can request and receive a token to use with Duo at no cost. Tokens generate an authentication code without an internet connection or cell signal. You can request a token online via Support Center. Tokens are sent by mail from the Service Desk and may take up to five days to be delivered to you. Duo also allows for physical authentication by tapping a compatible security key, which you can purchase, or using a built-in biometric authenticator, like Touch ID, which is available on some laptop computers. The Service Desk also offers single-use bypass codes that can keep your account authenticated for temporary absences of a mobile device.
How does MFA make Cal Poly accounts more secure?
...