Two-factor authentication is a simple and effective way to better protect your university account, which you use for accessing services like SIS or Microsoft 365. Besides your password, you will need to confirm your identity through a mobile application – so even if someone discovers your password, they won't be able to access your account without the second step.

Activation takes just a few minutes and significantly increases the security of your data. Moreover, some applications will soon require two-factor authentication, so we recommend enabling it as soon as possible.

Activation Process

You can use other applications or methods as the second factor, but here we will show the setup with the CU Key application. You can also use Google Authenticator or another app. However, please do not use SMS verification unless absolutely necessary, for example, if you don't have smartphone.

1. First, install the CU Key application on your phone: CU Key:

   
   

   As a second factor, we recommend CU Key application by Charles University.

   App for iOS

   App for Android

2. Launch the application and follow the login guide.

   
   

     

3. Now go to the following address and log in:

   
   

   https://ldap.cuni.cz/mfa

   
   

4. Click the Turn On button.

   
   

   

5. Choose the situation in which you want to be prompted for verification and click Submit.

   
   

   

6. In the Available Methods section, you should now see the registered CU Key application. Click the arrow on the right.

   
   

   

7. You will see emergency login codes that you can use if the verification application does not work, is not installed, or you cannot use it.

   
   

   

Login Process with Activated Two-Factor Authentication

1. Go to the page that requires login, for example, https://ldap.cuni.cz/, enter your login details, and click Login.

   
   

   

2. You will now be prompted to confirm the login request on your mobile phone.

   
   

   

3. On your mobile phone, tap the CU Key application notification and confirm the login if you initiated the login request.

   
   

   Note that this is the moment when you can prevent unauthorized access to your account if someone has stolen your password by denying or ignoring the login confirmation.