Body
Overview
2-Factor Authentication (2FA) is now required for most university accounts. Learn how to set up Microsoft Authenticator app or use a supported alternative method to securely sign in.
CAUTION - IT Services staff will never ask you to provide your password or authentication code. Do not provide such information to anyone who asks for it.
Note - If you have already registered 2FA but are currently locked out, please attempt a self-service password recovery or read the common issues section.
|
Requirement *
|
If you don't have it...
|
...you will need this instead
|
| ECU username * |
Follow our self-service username recovery instructions. |
Access to the personal email address you used to register at ECU (to receive automated messages). |
| ECU password * |
Create a ticket or visit Service Desk (B1116) for assistance. |
Access to the personal email address you used to register at ECU (to correspond with IT Services). Photo ID and/or student card may be required to validate your identity. |
| Modern iOS, Windows or Android smartphone capable of running Microsoft Authenticator |
Use one of the supported alternatives to Microsoft Authenticator. |
Access to an internet-connected macOS, Windows or ChromeOS computer (to receive 2FA prompts). |
| A personal laptop or desktop computer * |
Use a school or shared computer instead |
A private browser tab that can be closed when the process is complete (to erase your history and prevent unintended access by another computer user). |
ECU strongly recommends using Microsoft's 2FA authenticator to safeguard your personal data.
Note:
- Microsoft Authenticator is completely free (be cautious to avoid similar-looking, paid authenticator apps).
- It requires iOS 14.0 or later (available for iPhone 6 and above) or Andriod 6.0 or later.
- If your mobile device does not meet these requirements, please see our supported alternatives.
- IT Services provides only limited support for other authentication products
|
|
|
|
Step 1:
Open the 2FA registration page on your computer and enter your ECU username and password:
https://aka.ms/mfasetup
Your username will be the same format as your email address (e.g., ecarr1234@ecuad.ca).
|
 |
Step 2:
Skip past the More Information Required screen.
This screen simply indicates that you have not yet registered 2FA.
|
|
|
Step 3:
Install the Microsoft Authenticator App on your mobile device.
- You can download the app directly from your devices app store (e.g., Apple App Store, Google Play).
- Click Next once it is installed on your mobile device.
|
|
|
Step 4:
Click Next to proceed to the Set up your account screen
Keep your computer paused at this step and turn your attention to your mobile device.
|
|
|
Step 5:
Open the Microsoft Authenticator App on your mobile device and tap the Scan a QR Code option
If prompted, allow notifications from the App, click Accept and Continue.
|
|
|
Step 6:
Using your mobile device, scan the QR code displayed on your computer and then click Next.
|
|
|
Step 7:
The process on your computer will initiate a test notification.
- Make note of the number that appears on your computer
- On your mobile device, you should also receive a notification from the Microsoft Authenticator App .
|
|
|
Step 8:
Enter the number from the message on your laptop or desktop computer and tap Yes.
If you do not receive the notification, check the notification settings on your phone to ensure notifications for the Microsoft Authenticator app are allowed.
|
|
|
Step 9:
Your computer will indicate that approval has been received.
- Please allow a few moments for the approval step to complete.
- Then, click Next to continue.
|
|
|
Step 10:
Click Done to complete the process.
You should now see Microsoft Authenticator listed as the default sign-in method.
|
|
|
Step 11:
To add an optional secondary method, click Add method and enter the method details as prompted.
- Recommended in case your default method is unavailable.
- e.g., if you lose access to your mobile phone
- Modify your methods at any time https://aka.ms/mfasetup
|
Back to Table of Contents
More information coming soon.
Once 2FA setup is complete you can sign into all ECU systems and accounts for which you are eligible.
Note:
-
The 2FA sign in process will look the same for all digital services.
-
Remember to keep your phone nearby, whenever you are accessing university accounts.
-
Never share your two digit code with anyone, not even IT Services staff.
|
|
|
|
Step 1:
Enter your username at the Emily Carr University sign-in page.
This will be the same as your ECU email address e.g., ecarr8018@ecuad.ca.
|
 |
Step 2:
Enter your current ECU password.
This will be the same password that you use for email.
|
|
|
Step 3:
You will now be presented with a 2-digit code.
If you do not have cell service, or if you are using the Bitwarden App you must use the 6-digit code method instead.
|
 |
Step 4:
Open the Microsoft Authenticator app on your 2FA-registered phone and enter the 2-digit code.
- This process is time sensitive.
- You must send a new 2-digit code if you run out of time.
|
 |
Step 5:
Wait a few seconds for the authentication process to complete.
You should now have access.
|
Back to Table of Contents
|
Use
|
Explanation
|
|
At least (13) characters, including one each of the following:
- (1) uppercase letter
- (1) lowercase letter
- 1) number
- (1) non-alphanumeric character.
|
This is our minimum length + complexity requirement. |
| A memborable, but unique phrase (e.g., "Sunset-Comes-2-arctic-early-winter). |
Makes it easy for you to remember, but hard for people or bots to guess. Allow you to use longer, stronger passwords. |
| A trusted password manager (e.g., Last Pass, Apple Keychain). |
In case you forget it. |
|
Avoid
|
Explanation
|
| Popular phrases (e.g., I-Love-You, taking-care-of-business). |
These phrases are commonly used and guessed by hackers. |
| Semi-public personal details (e.g., your birthdate or name of pet). |
This information may be accessible on social media or the public internet. |
| Re-use of the same password for different accounts. |
If one account is breached, a hacker may try the same password on your other accounts. |
How to change your password
Note - To follow these instructions, you must be able to sign into your account.
- If you are are currently locked out of your account, review the Common Issues section first, and then submit a ticket if you require further assistance.
- If a password update has recently been mandated, you may be prompted to update it before our systems allow you to sign in.
|
|
|
Step 1:
Sign in at https://www.microsoft365.com/ using
your ECU username and current password.
- Choose 'Work or School Account' if prompted.
|
|
|
Step 2:
In the upper right corner click the gearwheel
icon to reveal Settings and then scroll down to
Password / Change your password.
*This page will soon no longer be available.
To change your password in the future,
you can go directly to MySecurityInfo.
|
|
|
Step 3:
Enter your old password, add and then confirm a new password.
|
Note - Passwords changes will impact your Wi-Fi connection
- Please remember to update your device Wi-Fi settings with your most current password so that the network remains connected.
- If you experience further issues with Wi-Fi, please submit a ticket and we will provide assistance.
Note - Please attempt self-service before contacting IT Services.
- IT Services will respond to tickets during regular business hours
- We are open Monday - Friday from 8:30 AM to 4:30 PM
If you don't recall your username, you may be able to recover access without assistance from IT Services.
Note - To recover your username, you need access to the personal email address you used to register at ECU.
Instructions
|
|
|
Step 1:
Visit the Forgot User Name page and enter your First Name, Last Name, and your personal Email Address.
This must be the same personal email address you used to register for ECU.
|
|
|
Step 2:
Click Submit.
If this email address is on record, we will send you further instructions.
|
Back to Table of Contents
If you are locked out, you may be able to recover access without assistance from IT Services.
Note:
-
-
Changing your ECU password will also change your password for all systems, including ECU email, MyEC, Moodle, Adobe, Wi-Fi and VPN.
-
Please remember to update any cached passwords on your devices e.g., campus Wi-Fi.
Instructions
|
|
|
Step 1:
Complete the Microsoft self-service Forgot Password page.
- Enter your ECU username / email address, complete the CAPTCHA challenge and then click next.
- If you are unable to proceed, retry the CAPTCHA challenge or ensure that you have the correct username.
|
|
|
Step 2:
Choose I forgot my password to proceed to the verification steps.
If you have simply been locked out due to too many incorrect attempts, choose I know my password, but still can't sign in. This will allow you to keep your current password.
|
|
|
Step 3:
Choose Approve a notification on my authenticator app (recommended) and click next.
Or choose the second option and enter the 6-digit code currently displayed in your Microsoft Authenticator app.
|
|
|
Step 4:
Enter your new password into both fields and click Finish.
The passwords entered must match.
|
 |
Step 5:
Your password has now been reset for all ECU systems.
Make sure to update your Wi-Fi settings and any browsers where the old password was cached.
|
Back to Table of Contents
Use Cases
|
Use
|
Explanation
|
| macOS computer |
iCloud Keychain |
Apple computers now support an OS-native solution for 2FA |
| Windows computer |
iCloud for Windows |
Windows also supports the use of the Apple iCloud 2FA solution. |
| Chromebook computer |
Bitwarden |
Devices running ChomeOS will need to use a 3rd party alternative. We have tested and recommend Bitwarden. |
Note:
- If you have already registered 2FA but are currently locked out, please attempt a self-service password recovery or skip to the troubleshooting section.
- ECU has not conducted a privacy impact assessment of this solution.
|
Requirement *
|
If you don't have it...
|
...you will need this instead
|
| ECU username * |
Follow our self-service username recovery instructions. |
Access to the personal email address you used to register at ECU (to receive automated messages). |
| ECU password * |
Create a ticket or visit Service Desk (B1116) for assistance. |
Access to the personal email address you used to register at ECU (to correspond with IT Services). Photo ID and/or student card may be required to validate your identity. |
| A personal laptop or desktop computer running macOS, Windows, Linux or ChromeOS* |
Create a ticket or visit Service Desk (B1116) for discuss alternatives. |
n/a |
| An existing Apple account |
Create a free Apple account. |
A new Apple account created using your personal or @ecuad.ca email address. |
Back to Table of Contents
Either option will work the same for 2FA, but you can consider the following:
- if you have an existing Apple account, you can simply proceed to the next step
- if set up with your personal email address, your Apple account + ECU passwords will be different
- Apple accounts that use ECU @ecuad.ca email addresses are not supported with iCloud for Windows
- if set up using your ECU email address (e.g., ecarr1925@ecuad.ca), your Apple password will be the same as used across all other ECU systems
Back to Table of Contents
Note - The following instructions are for the latest macOS Sequoia 15. Older systems may have slightly different steps.
|
|
|
Step 1:
Decide to use either a personal or managed Apple account from ECU:
- Personal Apple Account: If you already have a personal Apple Account set up on your device, and you are signed into to iCloud, you can simply use your existing account.
- Managed Apple Account from ECU: If you don’t have (or don’t want) to use a personal Apple Account, you can access a university Apple account using your @ecuad.ca credentials.
|
|
|
Step 2:
Navigate to Apple menu \ System Settings \ Apple Account.
For older macOS devices go to System Preferences \ Apple Account.
|
|
|
Step 3:
Sign in with your preferred Apple account.
You may use a personal account, or one connected to your ECU email address.
|
 |
Step 4:
If you haven't already done so, click Start Using iCloud.
|
|
|
Step 5:
Under iCloud settings, click on Passwords.
For older systems go to iCloud settings and enable iCloud Keychain.
|
|
|
Step 6:
Click the Sync this Mac toggle to enable iCloud Passwords + Keychain.
|
 |
Step 7:
Open the Passwords app and click Continue.
- You will find Passwords in your Applications folder.
- If prompted enter your Mac password or TouchID
|
|
|
Step 8:
Click + to add a new password called ECU.
Add your ECU credentials and click save
|
 |
Step 9:
Click Edit and then Set Up Code...
|
|
|
Step 10:
On a browser, sign into https://aka.ms/mfasetup and click + Add sign-in method.
Enter your ECU credentials when prompted.
|
|
|
Step 11:
First select Microsoft Authenticator and then click I want to use a different authenticator app.
|
 |
Step 12:
When presented with this screen, save a screen capture of the QR code.
You may can instead click Can't scan image? to get a Secret Key instead.
|
 |
Step 13:
Upload a screenshot of the QR code from the last step.
Or enter the Secret Key from the last step into the Setup Key field.
|
 |
Step 14:
Your password item will now display a 6-digit code.
This code will refresh every 30 seconds and can be used for satisfy 2FA prompts.
|
 |
Step 15:
Add the 6-digit code back into the Microsoft page to complete the setup.
After a moment you should see a green popup confirming the success of 2FA registration.
|
|
|
Step 12: Follow the same 2FA sign in process for all ECU applications and systems.
- When prompted with a 2-digit code, click I can't use my Microsoft Authenticator app right now
- Select Use a verification code and enter the current 6-digit code displayed in the Passwords app.
|
Back to Table of Contents
|
|
|
|
Step 1:
Create or use an existing personal Apple account:
- ECU Apple accounts using your @ecuad.ca credentials are not supported in iCloud for Windows.
|
|
|
Step 2:
Install iCloud for Windows (from Microsoft Store or apple.com).
|
|
Step 2:
Sign in with your personal Apple account.
|
|
|
Step 3:
Check to enable Passwords feature.
|
|
Step 4:
On the same browser, sign into https://aka.ms/mfasetup and click + Add sign-in method.
Enter your ECU credentials when prompted or use autofill.
|
|
|
Step 5:
First select Microsoft Authenticator and then click I want to use a different authenticator app.
|
|
Step 6:
When presented with this screen, click Can't scan image? to get a Secret Key instead.
|
| *image coming soon* |
Step 7:
Copy the Secret Key from the last step into the Setup Key field.
|
 |
Step 8:
Your password item will now display a 6-digit code.
This code will refresh every 30 seconds and can be used for satisfy 2FA prompts.
|
|
|
Step 9: Follow the same 2FA sign in process for all ECU applications and systems.
- When prompted with a 2-digit code, click I can't use my Microsoft Authenticator app right now
- Select Use a verification code and enter the current 6-digit code displayed in the iCloud for Windows app.
|
Back to Table of Contents
Optional - iCloud browser extensions provide a secure method to autofill your ECU password across various university sites. This is a convenience feature but it is not required.
Instructions
|
|
|
Step 1:
Install one of the official iCloud Passwords Browser Extensions
|
|
|
Step 2:
Launch the browser extension and respond to the authentication prompt.
Copy the 6-digit code from the lower window into the upper window to proceed.
|
|
Step 3:
Your passwords are now synced with iCloud Keychain and you may use autofill on ECU websites.
|
Back to Table of Contents
CAUTION - Only use Bitwarden if your only computer option is a ChromeBook.
- An in-app upgrade is required to use the 2FA (TOPT) Integrated Authenticator feature.
- ECU has not conducted a privacy impact assessment of this solution.
|
Requirement *
|
If you don't have it...
|
...you will need this instead
|
| ECU username * |
Follow our self-service username recovery instructions. |
Access to the personal email address you used to register at ECU (to receive automated messages). |
| ECU password * |
Create a ticket or visit Service Desk (B1116) for assistance. |
Access to the personal email address you used to register at ECU (to correspond with IT Services). Photo ID and/or student card may be required to validate your identity. |
| Chromebook computer running ChromeOS * |
Locate a macOS or Windows computer and use Apple iCloud instead. |
Access to an internet-connected macOS, Windows computer (to receive 2FA prompts from Apple iCloud). |
| An annual subscription to Bitwarden Premium ($10 USD) |
Locate a macOS or Windows computer and use Apple iCloud instead. |
Access to an internet-connected macOS, Windows computer (to receive 2FA prompts from Apple iCloud). |
|
|
Step 1:
Download BitWarden https://bitwarden.com/ or from the Google Play store.
This app is free to install but you will need to upgrade to premium to use the 2FA feature.
|
|
|
Step 2:
Create or sign in to your BitWarden account using any email address.
- This will be a completely separate account than the one you use for ECU email and MyEC.
- The new account process will send you a verification email.
- You will be asked to set a master password.
- Do not re-use your ECU password here.
|
|
|
Step 3:
Sign into https://aka.ms/mfasetup and click + Add sign-in method.
Enter your ECU credentials when prompted.
|
|
|
Step 4:
First select Microsoft Authenticator and then click I want to use a different authenticator app.
|
|
Step 5:
You will be given the option to Scan QR code.
You may can instead click Can't scan image? to get a Secret Key.
|
 |
Step 6:
In your BitWarden vault, click + New Login.
|
 |
Step 6:
Name the item (e.g., ECU), enter your ECU credentials, and then click Set up TOTP.
If you are unable to use a camera, you may choose to enter a key manually instead.
|
|
Step 7:
Scan the QR Code from Step 5 and click Next.
Or enter the Secret Key manually instead.
|
| *image coming soon* |
Step 8:
Bitwarden will generate a 6-digit code.
The premium version of the app is required to use this feature.
|
|
Step 8:
Add the 6-digit code back into the Microsoft page to complete the setup.
|
|
Step 9: Follow the same 2FA sign in process for all ECU applications and systems.
- When prompted with a 2-digit code, click I can't use my Microsoft Authenticator app right now
- Select Use a verification code and enter the current 6-digit code displayed in the iCloud for Windows app.
|
Back to Table of Contents
Two-Factor Authentication (2FA) adds an extra layer of security to your ECU account by requiring two or more pieces of evidence (i.e., factors) before allowing access to a service. Verifying your identity using a second factor (e.g. a mobile phone) prevents others from accessing your accounts, even if they know your password.
We strongly suggest you install Microsoft Authenticator App on your mobile device, as it provides the most secure and convenient 2FA experience.
Most digital services and applications that you interact with at Emily Carr will require 2FA.
Read our setup guide to register your account using Microsoft Authenticator
No. The Microsoft Authenticator app has a time-based passcode option built in. This lives on your phone and does not require an Internet connection. To use this alternative 2FA method instead of your default method, follow the steps below:
- On the Microsoft sign-in window, when prompted to open your MS Authenticator and approve the request, click the “I can’t use my Microsoft Authenticator app right now” link.
- Next, click “Use verification code from my mobile app”
- On your mobile device, open the MS Authenticator app and tap the account you are trying to login to.
- A 6-digit code will be displayed – enter this code into the Microsoft sign-in window.
- If you have registered an alternative 2FA method in addition to the Microsoft Authenticator App, you can also choose to use that method during the sign-in process instead.
Note – this code automatically changes every 30 seconds, and there is a little timer next to the code to let you know how long until the code expires. Wait until a new code appears so that you have the full 30 seconds to enter the code into the sign-in window and for the code to be verified by the system.
IT Services has tried to find a balance between security and convenience (meaning you do not necessarily get prompted to sign-in to your account every time you access an application or service). However, you must always be prepared to satisfy a 2FA challenge.
Every time you sign-in to a ECU application or service which uses our Microsoft Single Sign-On Service. In other words, whenever you enter your ECU email address and password in the ECU/Microsoft Azure sign-in windows.
Because ECU utilizes a "Single Sign-On Service", the number of times you are prompted to sign-in from within the same web browser or on the same device is greatly reduced. This means that the number of times you are prompted with a 2FA challenge is also greatly reduced. However, you should always have your 2FA method on-hand and at the ready so that you are not caught off guard.
If you still have access to at least one existing registered 2FA method and can login to your ECU account, just go to the 2FA Setup page aka.ms/mfasetup and click the + Add Method button.
- If you do not have access to your ECU account or any previously registered 2FA methods, you will need to contact the IT Service Desk for assistance.
- If your 2FA method (e.g., phone) is lost, stolen, or damaged, please report it as such to the IT Service Desk as soon as possible so that they can deactivate it.
- If you previously registered an alternate, or backup, 2FA method (e.g., tablet, iPad), you can continue to sign-in using that method. You can also use your backup method to gain access to your account and register a new 2FA method when you obtain a new phone.
IT Services provides full support for Microsoft Authenticator App and we strongly recommend that download it for free from the App store.
- Those cannot use a phone may install Apple iCloud or Bitwarden 2FA software for their desktop or laptop computer
- If you would like to use an alternative authenticator app (e.g. Google or other Software Tokens providers), please note that IT Services can only provide limited support.
No. However, some users may be prompted to add a credit card to their Apple account when attempting to install free apps such as Microsoft Authenticator on an iPhone. .
- Microsoft Authenticator is completely free, but please be careful not to confuse it with 3rd party paid authenticator Apps that may be available in your app store. When you get the original Microsoft Authenticator from the App store, it will look like the screen shot below. Please make sure that the developer says "Microsoft" and it is called "Microsoft Authenticator", as shown below:
*click on the image to zoom in*