Additional MFA Methods at WRDS

To better protect your personal data and your WRDS account from unauthorized access, WRDS requires that you use multi-factor authentication (MFA) when logging in.

For more information on MFA, see Multi-factor authentication

WRDS recommends Duo Mobile for most users to provide MFA when logging in to WRDS, as it is the simplest to set up, the easiest to use, supports all WRDS access methods, and is the most secure.

For detailed instructions on using Duo Mobile at WRDS, see Log in to WRDS using Multi-factor Authentication.

Other Methods

If you are unable to use Duo Mobile -- perhaps because you do not have a smartphone or because your smart phone doesn't support Duo Mobile -- you can follow the instructions on this page to configure and use one of the available alternate MFA methods when logging in to WRDS.

Important: PostgreSQL connections to WRDS only support Duo Mobile. This includes whether you connect directly to PostgreSQL using psql or similar, or whether you connect from within a programming language like Python or R. You cannot use any of the other MFA methods presented on this page to access the WRDS PostgreSQL database.

Top of Section

In order to use the additional MFA methods described on this page, you must first contact WRDS Support to request access.

Please include the following when you write in:

• Your WRDS username
• The Email address associated with your WRDS account. Please use the Email address associated with your WRDS account when you write in: please do not write in from a personal Email!
• Why you are unable to use Duo Mobile
• Which of the additional methods on this page you would prefer to use (optional)

WRDS Support will work with you to enable the required access and ensure you are able to log in to WRDS successfully.

Top of Section

Beyond Duo Mobile, the following additional MFA methods are available at WRDS.

Please note that not all MFA methods are able to support all WRDS access methods; supported methods are specified in the table below.

Important: PostgreSQL connections only support Duo Mobile.

Please take note of the supported WRDS access methods for each Duo MFA method presented above. Importantly: macOS TouchID / FaceID and Windows Hello can only be used with the WRDS website.

If you routinely access WRDS through other methods -- such as our PostgreSQL database, SAS/Studio, SSH to the WRDS Cloud, etc. -- you should use Duo Mobile, Text / SMS, or Phone Call / Landline instead.

Top of Section

With the Text / SMS MFA method, you receive an authorization code via text / SMS message on your phone when you log in to WRDS. Provide that code to the WRDS login prompt to complete the log in process.

The Text / SMS MFA method supports all WRDS access methods except PostgreSQL.

Set up Text / SMS

To set up and start using the Text / SMS MFA method, follow the instructions below:

1. If you haven't already, contact WRDS Support to request access to these additional MFA methods. Please include the following when you write in:
   1. Your WRDS username
   2. The Email address associated with your WRDS account. Please use the Email address associated with your WRDS account when you write in: please do not write in from a personal Email!
   3. Why you are unable to use Duo Mobile
   4. That you intend to use the Text / SMS MFA method
2. If you haven't already, complete enrollment of your WRDS account in MFA by following these instructions: Enroll Your WRDS Email.
3. Log in to the WRDS website using your WRDS username and password. The Duo Security welcome screen will appear.
   1. If the prompt doesn't appear, and you have logged into WRDS before, please see Managing Your Devices for further guidance.
4. Click Get Started.

5. Select Phone number from the list.

6. Enter your Phone number and select your Country code. Leave the This is a landline phone checkbox unchecked.
7. Click Continue.

8. Verify the configuration by returning to the WRDS website and entering your WRDS username and password when prompted. Within a few seconds, you should receive a text / SMS message to the phone number you entered earlier containing an authorization code. Enter that code into the WRDS login prompt to complete your log in.

Using the Text / SMS Method

Now that you have completed set up, you can use the text / SMS method as needed to complete your log in to WRDS.

You can use this MFA method with all WRDS access methods. For detailed instructions on using MFA with each WRDS access method (including SSH, PostgreSQL, SAS, etc), see Using MFA with Other Access Methods.

Be sure your phone is nearby and ready when you go to log in to WRDS! The login prompt will time out after a period of inactivity. If you do not provide the authorization code within a few minutes the attempt will time out and you will need to restart it with a fresh login.

Important: If you let the login prompt timeout too many times in a row, your account may be automatically locked. If you encounter an error message indicating that your account as been locked for too many timeouts or authorization retries, please contact WRDS Support to request an account unlock.

Remembered Devices

If you use the same computer, same browser, and same IP address to log in to WRDS, and you do not clear your cookies, the system can remember your MFA session for up to 30 days. After 30 days, you will be prompted to validate MFA again.

Top of Section

With the Phone Call / Landline MFA method, you receive an authorization code via an automated phone call when you log in to WRDS. Provide that code to the WRDS login prompt to complete the log in process.

The Phone Call / Landline MFA method supports all WRDS access methods except PostgreSQL.

Set up Phone Call / Landline

To set up and start using the Phone Call / Landline MFA method, follow the instructions below:

1. If you haven't already, contact WRDS Support to request access to these additional MFA methods. Please include the following when you write in:
   1. Your WRDS username
   2. The Email address associated with your WRDS account. Please use the Email address associated with your WRDS account when you write in: please do not write in from a personal Email!
   3. Why you are unable to use Duo Mobile
   4. That you intend to use the Phone Call / Landline MFA method
2. If you haven't already, complete enrollment of your WRDS account in MFA by following these instructions: Enroll Your WRDS Email.
3. Log in to the WRDS website using your WRDS username and password. The Duo Security welcome screen will appear.
   1. If the prompt doesn't appear, and you have logged into WRDS before, please see Managing Your Devices for further guidance.
4. Click Get Started.

5. Select Phone number from the list.

6. Enter your Phone number and select your Country code. Check the This is a landline phone checkbox.
7. Click Continue.

8. Verify the configuration by returning to the WRDS website and entering your WRDS username and password when prompted. Within a few seconds, you should receive a phone call to the phone number you entered earlier containing an authorization code. Enter that code into the WRDS login prompt to complete your log in.

Using the Phone Call / Landline Method

Now that you have completed set up, you can use the phone call / landline method as needed to complete your log in to WRDS.

You can use this MFA method with all WRDS access methods. For detailed instructions on using MFA with each WRDS access method (including SSH, PostgreSQL, SAS, etc), see Using MFA with Other Access Methods.

Be sure your phone is nearby and ready when you go to log in to WRDS! The login prompt will time out after a period of inactivity. If you do not provide the authorization code within a few minutes the attempt will time out and you will need to restart it with a fresh login.

Important: If you let the login prompt timeout too many times in a row, your account may be automatically locked. If you encounter an error message indicating that your account as been locked for too many timeouts or authorization retries, please contact WRDS Support to request an account unlock.

Remembered Devices

If you use the same computer, same browser, and same IP address to log in to WRDS, and you do not clear your cookies, the system can remember your MFA session for up to 30 days. After 30 days, you will be prompted to validate MFA again.

Top of Section

With the macOS Touch ID / Face ID MFA method, you are prompted by your macOS device to provide your fingerprint or point your face at your camera to verify your access when you log in to WRDS.

The macOS Touch ID / FaceID MFA method can only be used with the WRDS website! If you routinely access WRDS through other methods -- such as our PostgreSQL database, SAS/Studio, SSH to the WRDS Cloud, etc. -- you should use Duo Mobile, Text / SMS, or Phone Call / Landline instead.

Set up macOS Touch ID / Face ID

To set up and start using the macOS Touch ID / Face ID MFA method, follow the instructions below:

1. If you haven't already, contact WRDS Support to request access to these additional MFA methods. Please include the following when you write in:
   1. Your WRDS username
   2. The Email address associated with your WRDS account. Please use the Email address associated with your WRDS account when you write in: please do not write in from a personal Email!
   3. Why you are unable to use Duo Mobile
   4. That you intend to use the macOS Touch ID / Face ID MFA method
2. If you haven't already, complete enrollment of your WRDS account in MFA by following these instructions: Enroll Your WRDS Email.
3. Follow the instructions in How to Log in to WRDS Using Touch ID to complete the rest of the set up.

Using macOS Touch ID / Face ID

Now that you have completed set up, you can use the macOS Touch ID / Face ID method as needed to complete your log in to WRDS.

Important: You can use this MFA method only with the WRDS website!

Be sure you are ready to provide your fingerprint or point your face at your device's camera when you go to log in to WRDS! The login prompt will time out after a period of inactivity. If the attempt times out before you could take action, you will need to restart it with a fresh login.

Important: If you let the login prompt timeout too many times in a row, your account may be automatically locked. If you encounter an error message indicating that your account as been locked for too many timeouts or authorization retries, please contact WRDS Support to request an account unlock.

Remembered Devices

If you use the same computer, same browser, and same IP address to log in to the WRDS website, and you do not clear your cookies, the system can remember your MFA session for up to 30 days. After 30 days, you will be prompted to validate MFA again.

Top of Section

With the Windows Hello MFA method, you are prompted by your Windows computer to provide your fingerprint, point your face at your camera, or provide a PIN to verify your access when you log in to WRDS.

The Windows Hello MFA method can only be used with the WRDS website! If you routinely access WRDS through other methods -- such as our PostgreSQL database, SAS/Studio, SSH to the WRDS Cloud, etc. -- you should use Duo Mobile, Text / SMS, or Phone Call / Landline instead.

Set up Windows Hello

To set up and start using the Windows Hello MFA method, follow the instructions below:

1. If you haven't already, contact WRDS Support to request access to these additional MFA methods. Please include the following when you write in:
   1. Your WRDS username
   2. The Email address associated with your WRDS account. Please use the Email address associated with your WRDS account when you write in: please do not write in from a personal Email!
   3. Why you are unable to use Duo Mobile
   4. That you intend to use the Windows Hello MFA method
2. If you haven't already, complete enrollment of your WRDS account in MFA by following these instructions: Enroll Your WRDS Email.
3. Follow the instructions in How to Log in to WRDS Using Windows Hello to complete the rest of the set up.

Using Windows Hello

Now that you have completed set up, you can use the Windows Hello method as needed to complete your log in to WRDS.

Important: You can use this MFA method only with the WRDS website!

Be sure you are ready to provide your fingerprint, point your face at your computer's camera, or provide your PIN when you go to log in to WRDS! The login prompt will time out after a period of inactivity. If the attempt times out before you could take action, you will need to restart it with a fresh login.

Important: If you let the login prompt timeout too many times in a row, your account may be automatically locked. If you encounter an error message indicating that your account as been locked for too many timeouts or authorization retries, please contact WRDS Support to request an account unlock.

Remembered Devices

If you use the same computer, same browser, and same IP address to log in to the WRDS website, and you do not clear your cookies, the system can remember your MFA session for up to 30 days. After 30 days, you will be prompted to validate MFA again.

Top of Section

If you have multiple devices enrolled, you can manage them from the Manage Devices screen.

To manage enrollment of your Duo devices, please log in from an unremembered device and select Other Options instead of continuing to log in. Then select Manage Devices.

You can also do this to select from multiple MFA methods if you have configured more than one. For example, you might use macOS Touch ID with WRDS website logins, but switch to Duo Mobile for WRDS Cloud SSH connections.

If you do not have an unremembered device, you may try using incognito mode on your browser. If you cannot do either of these, please contact WRDS support for further assistance, and mention that you want to manage your devices / MFA methods, but don't have access to an unremembered device.

Top of Section

Having trouble? Verify that you are connected to a reliable WiFi or cellular connection and try again.

What if I'm not receiving text messages and phone calls?

Some users, who are generally located in Asia, do not always receive text messages or phone calls. Duo is aware of the issue and working on a solution. Until the issue is resolved, use Duo Mobile instead. Duo Mobile is a free App which is available for Android in the Google Play Store and Apple users in the Apple App Store.

If your country blocks the Google Play Store, see Duo's documentation: Does Duo Mobile work in China.

If you previously registered Duo with the Text / Phone call method but now you're having trouble receiving texts or calls, please contact WRDS Support.

What if I lose my phone?

Please contact WRDS Support.

IMPORTANT: When opening your support ticket you must use the email associated with your WRDS account.

What should I do if I'm not receiving the verification on my phone?

Verify that you are connected to a reliable WiFi or cellular connection, as a weak connection can interfere with the notificat

How long does it take for a verification to appear after authenticating?

If you are using Duo Mobile, you should receive an approval prompt shortly after authenticating to WRDS: likely within 10-15 seconds. If you are using the Text / Phone Call MFA option, the passcode text or automated call could take longer to reach you: perhaps up to a minute. Most verifications are repeated up to three times before timing out.

What if I cannot use a personal cell phone at work?

You can use a landline telephone to both register for Duo and use it to log in to WRDS. See the instructions above on using the Phone Call / Landline MFA method. If you cannot use that method either, and only use the WRDS website, you can use the macOS Touch ID / Face ID method or the Windows Hello method instead.

If you can't use any of those methods, and only use the WRDS website, please contact WRDS support and ask for help setting up Duo MFA without a phone. Please be sure to provide the required information when you do so.

Important: PostgreSQL connections to WRDS only support Duo Mobile. This includes whether you connect directly to PostgreSQL using psql or similar, or whether you connect from within a programming language like Python or R. You cannot use any of the other MFA methods presented on this page to access the WRDS PostgreSQL database.

Can I use Okta (or another MFA provider) for the two-step verification process?

No. You must use Duo with one of the options discussed above to complete the verification process and log in to WRDS.

How Do I Add Another Device for Authentication?

In order to add another device you must still have access to a device registered with Duo. If you still have access to a device enrolled with Duo, you can add your new device, such as a smartphone, to your Duo account. See the instructions in the section above, entitled Managing Your Devices. If you no longer have a device registered with Duo, contact WRDS Support.

Does Duo support my browser?

Duo supports these versions of popular browsers. Please update your browser to the listed version in order to use Duo with your browser. If you are still experiencing issues with your browser and Duo, try using the Firefox browser instead.

Still Need Help?

Check the Frequently Asked Questions (FAQ) on Using Duo MFA at WRDS.

Top of Section