Boston College's online services and resources are restricted to the Ļć½¶Šć community and require authentication. Account basics include foundational login information needed for accessing Boston College's network and services (Ļć½¶Šć username, Ļć½¶Šć Password, Secondary Password, Ļć½¶Šć 2-Step Verification, and GoogleĢż2-Step Verification), challenge questions, and a Ļć½¶Šć phone PIN.
Foundational login information needed for accessing Boston College's network and services.
Username
Every Boston College student, faculty, and staff member has a unique username that is assigned when you first become a member of the Ļć½¶Šć community. YourĢżĻć½¶Šć username is generated using a portion of your last name, often combined with random letters. Online services and resources restricted to the Ļć½¶Šć community, including Agora Portal, require authentication by entering your Ļć½¶Šć username and Ļć½¶Šć Password.
When and how do I get my username?
- Students receive their username via email after they are officially enrolled.
- New faculty and staff receive their username during the hiring process.
Ģż
If you do not know your username, contact the Help Center at 617-552-HELP (4357) or your Technology Consultant (for faculty/staff).
Security Note: Although you can use "username@bc.edu" for your Ļć½¶Šć email address, Boston College highly recommends giving people your "friendly" email address (firstname.lastname.#@bc.edu) to help protect your Ļć½¶Šć credentials.
Ģż
Issues with your Ļć½¶Šć Username?
Ļć½¶Šć usernames are generated using a portion of your last name, often combined with random letters. Usernames are only needed to sign onto Ļć½¶Šć systems and will not be changed unless there is a security issue. If there is an issue with your Ļć½¶Šć username, contact the Help Center at 617-552-HELP (4357).Ģż
Ļć½¶Šć Password
Do not leave your password written on a piece of paper or share it with anyone else. Your password and other security credentials are confidential and should be protected.
Your Ļć½¶Šć Password enables you to access many Ļć½¶Šć applications and systems including Agora Portal and EagleApps. Make sure to set the answers to the Challenge Questions. In the event you forget your Ļć½¶Šć Password, your answers to these questions will allow Ļć½¶Šć Help Center staff to confirm your identity and reset your password.
If you're new to Ļć½¶Šć, you will be assigned a temporary Ļć½¶Šć Password, which you must change the first time you log into Agora Portal.
All employees (including student employees, faculty, and staff) must also use Ļć½¶Šć 2-Step Verification to confirm their identity when changing their Ļć½¶Šć Password. This added level of security is in place to protect private employee information.
If You Know Your Current Ļć½¶Šć Password
Through Agora Portal, you have the option to change your Ļć½¶Šć Password to one of your choosing.
If You Don't Know Your Current Ļć½¶Šć Password
If you forgot your Ļć½¶Šć Password, and you previously set up Challenge Questions in Agora Portal, or have a phone number registered with DUO, you can change your password using Ģż (also found on the Portal log in page).Ģż
Ģż
Note About Eduroam
When you connect to the eduroam wireless network at Boston College, it requires you enter your Ļć½¶Šć Password. When you change your Ļć½¶Šć Password, this will disconnect you from the eduroam network, and you will be prompted to re-enter your Ļć½¶Šć Password. Before changing your Ļć½¶Šć Password, we recommend you open the network settings on your mobile devices, and "forget" the eduroam wireless network. This will help to prevent you from being locked out of your Ļć½¶Šć account temporarily, as those devices may attempt to use the old password to connect to eduroam.
Ģż
Create a Strong Password
- Include both uppercase and lowercase letters (case-sensitive).
- Include both letters and numbers (alpha-numeric).
- Do not include your login name, a.k.a. username, in any form (as-is, reversed, capitalized, doubled).
- Avoid words that can be found in a dictionary (including foreign and technical dictionaries).
- Do not use a password that has been given as an example of a good password.
- Do not use a password that begins with a number.
Make It Easy to Remember
One possible way to pick a good password is to make up your own acronym. Create a phrase that has meaning to you and pick the first letter of each word or abbreviate. A combination of numbers and letters is harder to guess or crack with a computer program.
For example:
- "My friend Brittany is 5 feet tall in heels."Ģż(mfBi5ftih)
- "I work 8 hours a day." (wrk8hrsdy)
Protect It
- Memorize your password.
- If you must write down your new password because you are afraid to forget it, then:
- Never write your username and your password on the same piece of paper.
- Do not place a written copy of your password on the side of your monitor, under your keyboard, etc.
- Destroy the written copy as soon as you have memorized your password.
- Do not allow anyone to look over your shoulder while you are entering your password.
- Do not use public computers to log in to anything -- if you do, change your password immediately-- they frequently have key logging software on them.
- Do not answer password reset "challenge" questions with information that is already online about you (on Facebook, your resume, your LinkedIn page, etc.), or someone can take over your account without even knowing your password.
- Do not use your Ļć½¶Šć Password for other web sites or other purposes besides Ļć½¶Šć systems.
- Do not use the same password for any logins that are important to you -- financial institutions, tax filing, etc.
- Change your password regularly.
- Change your password immediately if it has been compromised.
Need help remembering all your passwords? There are many 3rd party software programs designed to help you store and manage your passwords and login IDs, therefore making it easier to setup unique and strong passwords for each individual account. However, if you choose to use one, be aware of the following security warnings:
- A password manager is only as secure as the strength of the master password.
- Use a different password for your password manager than the ones you use to login to Ļć½¶Šć services.
Recommended Products & Support
Although these products are not officiallyĢżsupported by Ļć½¶Šć, ITS Security has reviewed and approved the following products for personal and work use. If you choose to use one of these services, please note that all support should be from the vendor or online community, and not ITS Support. Please note: ITS Security does not recommend the use of Password Manager ābrowser add-ons.ā
Secondary Password (for Ļć½¶Šć Gmail)
Use your Secondary Password to applications (e.g., Gmail, Google Drive, etc.). Note: Log in to Ļć½¶ŠćĢżGoogle Workspace using the format username@bc.edu.
Create/Change Your Secondary Password
Your Secondary PasswordĢżmustĢżbe a different password than your main Ļć½¶Šć Password. Requirements are detailed on the Secondary Password Change/Create page in Agora Portal.
- Log in to Agora Portal.
- On the My Services tab, clickĢżChange Secondary Password.
Ļć½¶Šć 2-Step Verification
Ļć½¶Šć 2-Step Verification uses Duo Security technology to confirm your identity using a second device such as a mobile phone, tablet, or landline phone.
You will be prompted to set up Ļć½¶Šć 2-Step the first time you accessĢża Ļć½¶Šć 2-Step service.
Recommended Browsers:
- The latest versions of Chrome and Firefox are preferred.
Ģż
To add a new device for Ļć½¶Šć 2-Step:
- Go toĢżĢż(Ļć½¶Šć sign-in required).
- ClickĢżManage Your Devices.
- Follow the online instructions to verify your identity and add your device.
- Amazon AppStream
- Change Ļć½¶Šć Password
- Change Challenge Questions
- Change Secondary Password
- CrashPlanĢżBackup
- Eagle VPN
- Microsoft 365
- MyBill
- PeopleSoft HR
- Peoplesoft Financials
- Refund Request
- Slate
- Voicemail via the web (vm.bc.edu & phones.bc.edu) when accessed from off-campus
Note: ITS will be expanding the use of 2-Step Verification to other services to help further protect Ļć½¶Šć accounts.
The Duo Mobile app can be used on smartphones or tablets. Once installed, tap āApproveā on the login request sent to your device. You can also quickly generate login passcodes, even without an internet connection or cell service.
Activate the App on Your Ļć½¶Šć 2-Step Account
- Go toĢżĢż(Ļć½¶Šć sign-in required).
- ClickĢżManage Your Devices.
- Follow the online instructions to verify your identity.
- Select Add a device.
- Select Duo Mobile.
- Enter the phone number of the device you plan to use with Duo Mobile, press Continue.
- Follow the online prompts to install Duo Mobile on your device.
Ģż
There are four ways to verify your identity with a secondary device.
Duo Mobile App - Push Notification
A push notification is sent to the device, and you can review the request and tap Approve to authenticate. Internet or cellular access is required to use this method.
Duo Mobile App - Mobile Passcode
Authenticate using a passcode generated with Duo Mobile. The app runs on your device so you don't have to have cellular or internet access to authenticate (as you do with push notifications).
SMS Text Passcode
A text message with a seven-digit passcode is sent to your mobile phone.
Phone Call
You receive an automated phone call that requires you to press any key to authenticate.ĢżNote: Due to restrictions by the Chinese government, automated phone calls for authentication to +86 numbers are not available.
You can use smartphones, tablets, mobile phones, and landlines as secondary devices. Each device has one or more verification methods available.
Smartphones
Authentication OptionsĢż
- Duo App - push notification
- Duo App - mobile passcode
- SMS text passcode
- Phone call
Ģż
Supported Platforms
- iOS
- Android
Tablets
Authentication OptionsĢż
- Duo App - push notification
- Duo App - mobile passcode
Ģż
Supported Platforms
- iOS
- Android
Mobile Phones
Authentication OptionsĢż
- SMS text passcode
- Phone call
Supported Platforms
- Mobile phones with SMS text messaging capability
- Note: Due to restrictions by the Chinese government, automated phone calls for authentication to +86 numbers are not available.
Ģż
Landlines
Authentication OptionsĢż
- Phone call
Supported Platforms
- All phones
- Note: Due to restrictions by the Chinese government, automated phone calls for authentication to +86 numbers are not available.
If you don't have access to any of your enrolled secondary devices, contact the Ļć½¶Šć Help Center at 617-552-HELP (4357) for assistance.Ģż
Google 2-Step Verification
Google 2-Step Verification (also known as two-factor authentication) adds an extra layer of security to your Ļć½¶Šć Google account in case your password is stolen.
You must be enrolled in Google 2-Step Verification in order to access Ļć½¶Šć Google services (Mail, Drive, Calendar).ĢżFailure to enroll will result in loss of access to your Ļć½¶ŠćĢżGoogle account (Mail, Drive, etc.). To unlock your account you willĢżneed to contact the Ļć½¶Šć Help Center.
- Download the Gmail app on your mobile device (optional but highly recommended): | . Even if you prefer to use a different email app on a daily basis, adding the Gmail app will help simplify 2-step verification. After downloading it, configure Gmail for your Ļć½¶Šć account.
- Enroll in 2-Step:ĢżGo to the and follow the prompts. Set up the Google Prompt option (via the Gmail or the Google [Search] app on your device).
- Configure at least one other backup option.
Tip: In case you donāt have access to your phone, it is a good idea to set up backup codes. Then print the codes & put them in your wallet.
Once youāve enabled 2-Step, when you access your Ļć½¶Šć Google account (Gmail, Drive, Calendar, etc.) from a new device, it will require both your login information and a secondary verification.
You have 1 week to set up Google 2-Step Verification after you first login to your Ļć½¶Šć Google account.
Ģż
Google 2-Step Verification FAQs
2-Step Verification (also known as two-factor authentication, multi-factor authentication [MFA], or 2FA) adds a second layer of protection to the login process. 2-Step Verification combines something you know (your password) with something you have (a phone or code). You most likely already have experience using 2-Step Verification with Eagle VPN or with an online bank account.
Google 2-Step adds extra security, and helps safeguard you from phishing scams and ransomware. This additional protection aligns with best practices in account security, and is a new compliance requirement for Ļć½¶Šćās cyber insurance coverage.
ITS recommends you use the Google Prompt option (via the Gmail or the Google [Search] app on your device), and configure at least one other backup option.
In case you donāt have access to your phone, it is also a good idea to set up backup codes. Then print the codes & put them in your wallet.
In general, you will need to use 2-Step the first time you access your Google account using a new device. Once you log into your Ļć½¶Šć Google account (Gmail, Drive, Calendar, etc.) and complete 2-Step Verification on your phone or computer you will have the option to āremember this device.ā After that, Google will not prompt you for 2-Step Verification on that device unless you change your password or if Google suspects that your account has been breached.
No, it does not. Google 2-Step Verification is different from Ļć½¶Šć 2-Step Verification:
- Ļć½¶Šć 2-Step Verification uses Duo to verify your identity and login to secure Ļć½¶Šć services such as Eagle VPN, MyBill, PeopleSoft HR, and Peoplesoft Financials. For more information about Ļć½¶Šć 2-Step Verification, visit bc.edu/2step.
- Google 2-Step Verification adds an extra layer of security to your Ļć½¶Šć Google account. You must set up Google 2-Step Verification separately from Ļć½¶Šć 2-Step Verification.
If you don't have a mobile device, you have a few options for 2-Step set up:
- Use a land line phone to receive a voice call.
- Set up backup codes.
- Use an authenticator app on a web browser.
Before enabling 2-Step within your Google account, make sure you are running the latest version of your email client that supports a special protocol called āOAuth2.ā
Apple Mail
You need to be using macOS Catalina (v. 10.15.4) or higherĢżto do Google 2-Step in Apple Mail.
Outlook
You need to be using Office 2019 or higher to do Google 2-Step. The version of Outlook that comes with Office 2016 does not support OAuth2.
Thunderbird
Step 1: Make sure you are running the latest version of Thunderbird:
- Select āHelpā -> āAbout Thunderbird.ā If an update is available, install it.
Ģż
Step 2: Make sure you are using āOAuth2ā for inbound and outbound mail settings:
- From the top right menu, select the 3 vertical bars and select Account Settings.
- On the left, select Server Settings and on the right make sure the āAuthentication methodā is set to: OAuth2
- On the right, select āOutgoing Server (SMTP)ā:
- Edit the outbound email server name to: smtp.gmail.com
- Make sure the āAuthentication methodā is set to: OAuth2 - Close Thunderbird and then restart it.Ģż
- The first time you send or receive email, you will be prompted to log into your Google account. When prompted, allow Thunderbird access to your account.
Yes, but only as an authenticator app to get a passcode for 2-Step. Duo will not send push notifications like it does for VPN or Peoplesoft. To get push notifications, you need to install the Gmail app or the Google (Search) app.
Using Duo Mobile as Your Authenticator App
To set up Duo Mobile app for your authenticator app:
- Follow using an authenticator app. Ignore any mentions of Google Authenticator or other mobile applications ā you'll be using Duo Mobile instead.
- Follow the "Third-Party Account Setup" instructions on the . Important: When the barcode appears, open your Duo Mobile app. DO NOT DOWNLOAD Google's Authenticator app (as instructed on the screen).
To use Duo Mobile app as your authenticator app:
- When prompted to validate on Google, you will be instructed to use the Google Authenticator app. Instead, use the Duo Mobile app to get the passcode.
In case you donāt have access to your phone, it is a good idea to set up backup codes. Then print the codes & put them in your wallet.
If you don't have access to any of your enrolled secondary devices or backup codes, contact the Ļć½¶Šć Help Center at 617-552-HELP (4357) for assistance.
Be sure to install the Gmail app, so you can receive Google prompts on your phone when you are connected to a secure wireless network.
In case you donāt have access to your phone, it is a good idea to set up backup codes. Then print the codes & put them in your wallet.
If you don't have access to any of your enrolled secondary devices or backup codes, contact the Ļć½¶Šć Help Center at 617-552-HELP (4357) for assistance.
Please do not share your login credentials with another person. Instead, .
You may have set up your Ļć½¶Šć Google account on your iPhone as a Microsoft Exchange account. You can resolve this problem by removing the account and re-adding it as a Google account by following these steps below:
- Remove the Microsoft Exchange Account:
- Go to SettingsĢż>ĢżMailĢż> Accounts, then select your Ļć½¶Šć Google account and click Delete Account.
- Re-Add it as a Google Account:
- Go toĢżSettings > MailĢż> AccountsĢż> Add Account, select Google
- At the Google sign-in page, enter your Ļć½¶Šćusername@bc.edu, then tapĢżNext.
- Enter your Secondary Password, then tapĢżNext.
- Toggle the settings you want to add to the phone (calendar, contacts, etc), then tapĢżSave.
Ģż
If the app doesnāt offer āSign in with Google,ā you can either:
- Switch to a more secure app or deviceĢż
- Use App Passwords
Ģż
When you use Google 2-Step Verification, some less secure apps or devices may be blocked from accessing your Google Account. App Passwords are a way to let the blocked app or device access your Google Account.
Please make sure you are enrolled for your Ļć½¶Šć Google Account and not a personal account. To see if Google 2-Step is enabled, be sure you are viewing your Ļć½¶Šć Google account, and visit:
If you do not turn on 2-Step, forwarding will continue to work, but you wonāt be able to log into your Ļć½¶Šć Google account. To access your account, you will need to contact your TC, the Help Center, or go to the Walk-In Help Desk.
New students, faculty & staff: You have 1 week to set up Google 2-Step Verification after you first login to your Ļć½¶Šć Google account. If you do not set up Google 2-Step within this time, you will get the message below when attempting to sign into your Ļć½¶Šć Google account. To access your account, you will need to contact your TC, the Help Center, or go to the Walk-In Help Desk.
- Only one person (the āownerā) should have the password for an account and that person is responsible for that account.
- The āownerā of the shared account should set up Google 2-Step verification with multiple verification methods (and at least include a department phone).
- All other people accessing the shared account need to be set up as delegates. Learn . (video by Google).
Security Note: Sharing passwords with others is not secure. If Google detects multiple logins from different devices at the same time, it will assume the account is compromised and suspend it. Please give anyone who needs access to the account delegate access.
Challenge Questions are used to verify your identity in the event you forget your password. You are required to set answers to three challenge questions, such as your favorite color or your favorite food. Your answers will allow Ļć½¶Šć Information Technology Services staff to confirm your identity and reset your password.
Create/Change Your Challenge Questions
- Log into Agora Portal, and select the Change Challenge Questions link. Note: Student employees, faculty, staff, and anyone using Eagle VPN will also be prompted to use Ļć½¶Šć 2-Step Verification to confirm their identity.
- Follow the online prompts to change your Challenge Questions.
Your PIN is used to log in to voicemail on your Ļć½¶Šć phone.
New to Boston College
Your initial temporary voicemail PIN will be emailed to you by Ļć½¶Šć Information Technology Services. You will be required to change it at first login. See the complex PIN requirements on the Voicemail Setup page.
Change Your PIN
To change your voicemail PIN via:
- Phone: Dial 2-4006 (on-campus) or 617-552-4006 (off-campus). To be prompted for yourĢżextension (e.g., ID), press * (star) during the greeting. When prompted, enter your current PIN. Press 4 from the main menu; then press 3 (preferences); press 1 (PIN) and follow the prompts.
- Web (not available for shared or department voicemail): Log in to using your Ļć½¶Šć credentials and Ļć½¶Šć 2-Step Verification. Then, at the top of the page, click Settings. From the Passwords menu, click Change PIN.
Ģż
Note: See the complex PIN requirements on the Voicemail Setup page.
For Shared & Department Voicemail: You must call the Help Center at 617-552-HELP (4357) to have it reset.
Reset Your PIN
If you forget your voicemail PIN:
- You can reset it anytime at > Settings > Passwords > Change PIN. See the complex PIN requirements on the Voicemail Setup page.
- You can also call the Help Center at 617-552-HELP (4357).
Ģż
For Shared & Department Voicemail: You must call the Help Center at 617-552-HELP (4357) to have it reset.