Canvas @ Yale is enabling Canvas Multi-Factor Authentication (MFA) for all remaining local Canvas guest accounts, which are accounts that login to Canvas @ Yale through the Guest login portal and use a personal email and password to authenticate into Canvas. The Canvas MFA, which is similar to Yale's DUO-MFA login process for users with a Yale NetID, is an added layer of account security for all local Canvas guest accounts.
Canvas MFA will be OPT-IN only from July 1st, 2025 to August 31st, 2025. After this time, Canvas MFA will be required for all local guest account.
Local Canvas guest accounts can be actively converted to Canvas User Sponsored Identities rather than signing up for Canvas MFA.
Yale NetID holders can make a request on behalf of a local Canvas guest account user to convert the account to a Canvas User Sponsored Identity. This is true for both existing local guest accounts and ones that have been previously deactivated. To learn more about this option, please see our article about "Requesting Canvas User Sponsored Identities for Guests to Access Canvas @ Yale".
Table of Contents
This article will address the following information:
How to Set Up Canvas MFA
If you are opting in for the first time or you were not prompted at log in, open your Canvas account settings by following these steps:
- Click on your profile image in the Global Navigation menu.
- Select "Settings" from the menu tray that opens.
- Click "Set up Multi-Factor Authentication" along the right-hand side.
Once Canvas MFA becomes required, the initial set up will be prompted upon logging in and you can skip directly to "Verifying Your Identity".
Canvas MFA will be OPT-IN only from July 1st, 2025 to August 31st, 2025. However, you will still be able to edit your Canvas MFA settings through these instructions at any time. Canvas MFA will be required for all local guest accounts starting September 1st, 2025. The initial set up screen below will be displayed upon first login.
Verifying Your Identity
When you access the set up screen either from your account settings or upon logging in, you will see the screen below. All subsequent logins will prompt you to verify your identity using any of the methods your previously set up. There are two methods of verification
- Authenticator app
- Text message (US mobile numbers only)
Via Authenticator App
Canvas offers suggested authenticator apps such as Google Authenticator, Microsoft Authenticator, or Authy. You may also use other apps such as Duo Mobile, which is the application Yale uses for CAS authentication.
- Scan the QR code displayed from WITHIN your chosen authenticator app.
- DO NOT scan the code from your phone's camera app.
- After scanning the QR code, you are provided with a verification code. Enter that code in the text box under the QR code.
- You can optionally check the "Remember this computer" box on a trusted computer to. This is valid for 30 days.
- Make sure the code is correct and click "Verify" when you are ready.
Via Text Message
The text message authentication method is available for US mobile numbers ONLY. If you have an international phone, please verify via the authenticator app method instead.
We recommend against using web-based phone numbers such as Google Voice or WhatsApp numbers as text messages may not be deliverable.
- Enter your mobile number in the box provided and click "Send"
- This will send you a verification code via text message. Enter that code in the text box under the mobile number entry.
- You can optionally check the "Remember this computer" box on a trusted computer to. This is valid for 30 days.
- Make sure the code is correct and click "Verify" when you are ready.
Using Canvas MFA at Login
Once you have Canvas MFA set up, you will be prompted to verify your identity each time you login. If you chose to "Remember this computer" during set up, you may not be prompted again on the same computer, but you will be prompted on logins from any new computers.
You will retrieve a verification code from whichever method you chose at set up. For authenticator apps, you will open your app on your phone to retrieve the code. For text messages, Canvas will automatically send you a code via text.
- Once you have retrieved a code, enter that code in the bar under the QR code.
- You can optionally check the "Remember this computer" box on a trusted computer to. This is valid for 30 days.
- Make sure the code is correct and click "Verify" when you are ready. This will complete your login, and you will be taken to your Canvas dashboard
View/Edit Your Canvas MFA Settings
Once Canvas MFA becomes required, the disable MFA button will still be available, but once disabled you will be prompted to configure your MFA again upon the next time you login to Canvas.
After initial set up, you can access your Canvas MFA Settings through your account settings. This can be accessed in the same way as "How to Set Up Canvas MFA".
If you chose to use the text message method of verification, you will see your mobile number listed under "Other Contacts" as well.
Under account settings, you will see the MFA configuration settings. The edit options are:
- "Reconfigure" to modify your settings
- "Disable" to remove Canvas MFA
For more help, please contact [email protected].