2-Step Verification

2-Step Verification provides stronger security for your Rebelmail account by using both your password and your phone to verify your identity when you sign in. By requiring two different forms of identification for signing in, your Rebelmail account and personal information will be better protected. Even if someone stole your password, they would not be able to sign in to your account without the verification code sent to your phone.  

How can I turn it on?

Click on the steps below to see detailed instructions on how to set up 2-Step Verification, or download the full instructions to print.

Step 1 - Enable 2-Step Verification for your account

  1. Go to the 2-Step Verification page. You may be prompted to sign in with your Rebelmail account.
  2. Click on Get Started.
  3. Follow the step-by-step instructions. You will be asked to set up your mobile phone to be used for 2-Step Verification.

Note: You may be prompted to sign in to your Gmail, Google Chrome, and your Google accounts on your mobile devices after enabling 2-step verification.

Step 2 - Generate backup codes for when you do not have access to your phone

If you do not have access to your phone, such as when you are traveling, you can sign in with a back up code. To generate your backup codes, do the following:

  1. Go to your 2-Step Verification settings page. You may be prompted to sign in with your Rebelmail account.
  2. Click on SET UP under Backup codes.
  3. Print out the codes and place it in a safe and accessible place like a wallet, purse, or fanny pack.

Step 3 - Generate an app password for desktop and mobile apps like Outlook, Mac Mail, and Mail on your iPhone

Some desktop and mobile apps like Microsoft Outlook, Mac Mail, and Mail on your iPhone do not support 2-Step Verification and you may receive incorrect password errors even when you are typing in your correct Rebelmail password. To get your apps working again, you will need to generate a unique app password for each of those applications. To generate an app password, do the following:

  1. Go to the App passwords page. You may be prompted to sign in with your Rebelmail account.
  2. Select the app and the device it's on and click Generate.
  3. A screen will appear with the app password. Follow the on-screen instructions to use it with your app.


    Note: This is a unique, one-time password that you DO NOT need to remember. DO NOT write it down or share it with anyone. You can generate new passwords through the app password page whenever you need one, even for an application that you have authorized before.

 After you have enabled 2-Step Verification, signing in to your Rebelmail account will work a little differently:

1. Sign in to your Rebelmail account 
Visit gmail.com and sign in with your Rebelmail email address and password as usual.

2. A verification code will be sent to your mobile phone
A verification code will be sent to your mobile phone either via text or a phone call, whichever you chose when you set up 2-Step Verification. Type in the verification code to complete the sign in process.


 
Note: See the FAQs below for alternative methods of authentication besides verification codes via text or a phone call.


FAQs

How do I add my computer as a trusted device so that I am not prompted for a verification code every time I sign in?

You can add your home computers as trusted devices so that you are only prompted for a verification code when you sign in to those computers once every 30 days. To add a computer to the trusted device list, sign in to your Rebelmail account on that computer and check the box Remember this computer for 30 days when it asks you for a verification code.

After 30 days, you will be asked for a verification code again and you can check the box to extend it for another 30 days. 

Note: Do not add a public or a shared computer as a trusted device. 

I turned on 2-Step Verification and an app on my phone or computer stopped working, what can I do?

Some desktop and mobile apps like Microsoft Outlook, Mac Mail, and Mail on your iPhone do not support 2-Step Verification and you may receive incorrect password errors even when you are typing in your correct Rebelmail password. To get your apps working again, you will need to generate a unique app password for each of those applications. To generate an app password, do the following:

  1. Go to the App password page. You may be prompted to sign in with your Rebelmail account.
  2. Select the app and the device it is on and click Generate.
  3. A screen will appear with the app password. Follow the on-screen instructions to use it with you app.

    Note: This is a unique, one-time password that you DO NOT need to remember. DO NOT write it down or share it with anyone. You can generate new passwords through the app password page whenever you need one, even for an application that you have authorized before.

What are the alternative authentication methods besides verification codes?

Instead of having a verification code sent to your mobile phone, you can choose these alternative methods of authentication:

Google Prompt
Instead of a verification code, Google can send a notification prompt to your mobile phone. The prompt will ask if you are trying to send in like this:

Follow Google's instructions on setting up Google Prompt on your iOS or Android devices to turn on this feature.

Notes:

  • An Internet connection is required to use Google Prompt
  • iPhone users will need to install the Google Search app to use Google Prompt
  • You cannot have Security Keys and Google Prompt enabled at the same time

Install Google Authenticator
Instead of having a verification code sent to your mobile phone via text, you can install the Google Authenticator app and use it to generate a verification code. The benefit of using the app is that you do not need Internet connection to use it.


Learn more about Google Authenticator and how to install it on Android and iOS devices.

Security Key
A Security Key is a special kind of dedicated USB device that you can use in place of a verification code. Rather than typing a code, you insert the Security Key into your computer’s USB port and tap it when prompted in Chrome. You can use the same Security Key for multiple Google accounts and on any computers with the Google Chrome browser. Please contact the IT Help Desk if you have any questions about purchasing a Security Key.

I received a verification code but I am not trying to sign in to my account. What should I do?

If you receive a verification code that you were not expecting, your account could be compromised. Contact the IT Help Desk immediately so that we can make sure your Rebelmail account is secured. You should not ignore unexpected verification codes, as it could allow the person unauthorized access to other UNLV systems.

Does turning on 2-Step Verification protects my other UNLV accounts (e.g., Webcampus, Secure Wireless)?

No. 2-Step verification works only when you are signing in to your Rebelmail account and will not protect your other technology accounts like Webcampus and Secure Wireless.

How do I register more than one phone (backup phone)?

You can add another phone number to receive your verification code for the times when you do not have your primary phone with you. For example, you can add your home phone as a backup phone for when you have forgotten or lost your mobile phone. To add a backup phone, do the following:

  1. Go to your 2-Step Verification settings page. You may be prompted to sign in with your Rebelmail account.
  2. Click on ADD PHONE under Backup phone.
  3. Type in your phone number and your option for how to get the code.  If you are adding your home phone, select Phone Call.
  4. Click DONE. A verification code or a phone call will be sent to that phone number.

To have a verification code sent to your backup phone instead of your primary phone, do the following:

  1. Sign in to your Rebelmail account using your email address and password as usual.
  2. When you are asked for your verification code, click on Try another way to sign in.
  3. Click Get a phone call with a verification code at [Backup Phone Number].
  4. A verification code will be sent to your backup phone.
  5. Enter the verification code to complete the sign in process.

What if I forgot or lost my phone?

If you do not have your mobile phone with you, you can use your backup phone or backup verification codes to sign in. To use your backup phone or codes to sign in, do the following:

  1. Sign in to your Rebelmail account using your email address and password as usual.
  2. When you are asked for your verification code, click on Try another way to sign in.
  3. Click Get a phone call with a verification code at [Backup Phone Number]  OR
    Enter one of your 8-digit backup codes.
  4. Enter the verification code to complete the sign in process.

If you did not setup a backup phone or have backup codes, please contact the IT Help Desk at 702-895-0777 and we can assist you with signing in to your account.

What if I replaced my mobile phone or phone number?

If you have replaced your phone and kept the same phone number, you do not need to re-register your phone to work with 2-Step Verification.

If you have changed your phone number, you will need to register your new phone number to work with 2-Step Verification. Do this by going into your 2-Step Verification settings page and updating your phone number under Voice or text message.

What if I am traveling and might not receive data or messages sent to my phone?

We recommend that you set up alternate verification methods that do not require text message or phone data, such as backup codes or Google Authenticator

Install Google Authenticator
Instead of having a verification code sent to your mobile phone via text, you can install the Google Authenticator app and use it to generate a verification code. The benefit of using the app is that you do not need Internet connection to use it. Learn more about installing Google Authenticator.

Generate Backup Codes
To generate your backup codes, do the following:

  1. Go to your 2-Step Verification settings page. You may be prompted to sign in with your Rebelmail account.
  2. Click on SET UP under Backup codes.
  3. Print out the codes and place it in a safe and accessible place like a wallet, purse, or fanny pack.

To use a backup code, do the following:

  1. Sign in to your Rebelmail account using your email address and password as usual.
  2. When you are asked for your verification code, click on Try another way to sign in.
  3. Click Enter one of your 8-Digit backup codes.
  4. Enter your backup code.
  5. Mark the code as used since each code can only be used once.

How can I turn off 2-Step Verification?

We do not recommend that you turn off 2-Step Verification, but if you choose to so, you can follow the instructions below:

  1. Go to the 2-Step Verification page. You may be prompted to sign in with your Rebelmail account.
  2. Select Turn off 2-Step Verification.
  3. Click OK when you see the confirmation window.

After you have turned off 2-Step verification, you will want to revoke the app passwords you created for desktop and mobile apps like Outlook and Mail for your iPhone. You can revoke your app password by doing the following:

  1. Go to the 2-Step Verification page. You may be prompted to sign in with your Rebelmail account.
  2. Click on App passwords. You may be prompted again to sign in with your Rebelmail account.
  3. Click Revoke for any listed applications.

Note: After revoking your app passwords, use your Rebelmail password the next time you are accessing those apps.