Carnegie Mellon University

Never Share Passwords on Computer Monitor

October 15, 2021

Students Sharing Andrew userID Password

When should students share their Andrew userID Password? The short answer is never.  Sharing an Andrew ID password is against the Carnegie Mellon University Computing Policy and doing so can result in the account being suspended.  A student sharing their Andrew userID & password to anyone (including parents, guardians, or designated individuals) for any reason is NOT PERMITTED and can potentially put the student's data and academic integrity at risk.

Other Options

Students have the ability to authorize parents, guardians, or other designated individuals to have access to student grades, billing information and/ or make payments through My Plaid Student (MPS).  In order for an individual to log in to MPS, a student must first grant access within their personal Student Information Online (SIO) account.  During the authorization process, the student selects the categories of information an individual is permitted to access.

Receive a Random 2fa Notification?

If you receive a DUO 2fa push notification and you are not actively logging in to your account or an approved website that utilizes Single Sign-On (SSO) please push “Deny”.  You will then receive a "Was this a suspicious login?" prompt.  Clicking "Yes" on this prompt sends a DUO Fraud alert to the Information Security Office. You should immediately report the incident to iso-ir@andrew.cmu.edu or by phone at 412-268-2044 to give us more context as someone could be attempting to compromise your account.  See the images below for more detail.

3 images. First image is of DUO screen with option to "deny" or "approve" authentication request. 2nd image is from the duo app that reads "Was this a suspicious login?" with options to click "Yes" or "No". 3rd image is the Duo mobile app reading "thank you. We've notified your DUO administrator. "