This article outlines how to set up and use one of the options for multifactor authentication (MFA) at UMass Amherst. More about MFA and other authentication methods you can use 

About One-Time Password Token Devices 

Recommended for people without a smartphone. Check a physical keychain device for a code, and type it in to finish logging in.  

• Does not require a smartphone
• Not compatible with Self-Service Password Reset (choose two other methods). 

One-time password (OTP) token devices are physical keychain-sized tools which generate and display a code offline — allowing you to access and protect your UMass Amherst account with secure multifactor authentication (MFA), without using a phone or other second internet-connected device.  

If you are interested in using a UMass Amherst supported one-time password device, contact your area’s IT administrator. Departments can purchase OTP token devices with a speedtype through the Two-Step Login Token Request form in ServiceNow. Contact Enterprise Desktop Support for more information.  

 

Set Up Your One-Time Password Device 

Note: If you acquired a UMass-supported one-time password device from Enterprise Desktop Support (EDS), it will already be set up for you. If you see the device listed on the Security Info page on the first step of these instructions, no further action is required and can use the device following the instructions in the next section.  

⚠️ If your one-time password device was previously added to your account by an IT Administrator, you won’t be able to set it up again yourself. 

1. Go to mysignins.microsoft.com/security-info 
2. Click Add sign-in method.  
3. Select Hardware token.  
4. On the Register a hardware token screen, click Next.  
5. Enter the serial number for your hardware token, and click Next.  
   It is typically printed on the back of the device, below the barcode.  
6. On the Let’s name your token screen, enter a name that will help you identify this device later, then click Next.  
7. Once you see the Enter the code screen, press the button on your one-time password device.  
   Type the code it displays into the Enter code field, then click Next.  

 

Log In Using Your One-Time Password Device 

You can use the code generated by your one-time password token device while logging into UMass Amherst services. For example, while logging into SPIRE:  

1. Go to spire.umass.edu and click Log in to SPIRE. 
2. Enter your NetID email [NetID]@umass.edu and click Next. 
3. Enter your password and click Sign in.  
4. Click Use a verification code.  
   If you do not see this option, you may need to click I can’t use my Microsoft Authenticator App right now.  
5. Press the button on your one-time password device.  
   Type the code it displays into the Code field on the login screen, then click Verify.  
6. If you are using a computer only you access, click Yes to Stay signed in. Do not use this option on public or shared computers.  

 

Add, Change, or Remove Multifactor Authentication Options 

Go to mysignins.microsoft.com/security-info to add or delete authentication methods and to set a default option. 

Note: If you delete a one-time password token device which was added to your account by an IT Administrator, you won’t be able to set it up again yourself.