Change Challenge Level

This option is only available to you after you've set up two-step authentication. If you have not done so, or if you have removed two-step authentication from your account, you will not have a link to your challenge level.

Change two-step authentication challenge level

You can choose your challenge level, which determines how often you're asked to supply an authentication code when authenticating with Stanford's WebAuth servers. You have three choices of level.

  1. On your desktop or laptop browser, visit the Stanford Account Application and then click Set Level.
    Set Level button
  2. You will be presented with three choices:
    • The default challenge level is what your account is set at when you've finished setting up two-step authentication for the first time. At this level, you will only be asked for your authentication code if you access a Stanford website that requires a high level of security. The advantage to this setting is that you won't have to enter your authentication code very often; but the drawback of this level is that it will not do much to protect you should someone guess your password and try to log in as you.

      select default two-step authentication behaviour
    • The suspicious locations challenge level allows our systems to prompt you for an authentication code whenever it thinks you may be logging in from a suspicious or new geographical location. This setting provides you with more protection than the default setting, should someone geographically removed from you learn your password and try to access your Stanford account. This also means that two-step authentication will be required whenever you travel or log in from a new location.

      elect require two-step authentication from suspicious locations
    • The always challenge level will always ask you for an authentication code when you access a WebAuth-protected Stanford site. This ensures that no one can log into your account without both knowing your password and having your authentication mechanism (i.e., your personal smartphone, your cell phone, or your printed list). This provides your account with the highest level of security and can help foil attempts by others to get into your Stanford account.

      select always require two-step authentication
  3. Select the option that you prefer. Your level will be set accordingly.