7254
What is CougarLock?
Cougar Lock is APU's Multi-Factor Authentication (or "MFA") solution. When using your NetID and Password to log into an APU website from a new device or location, you'll also need to provide a randomly generated 6 digit code from your phone. This ensures that hackers can't access your APU Account even if they get your NetID and Password.
Do I have to use CougarLock?
As of July 5, 2022, all Staff and Faculty are required to use Cougar Lock.
As of July 2023, all students are required to use Cougar Lock.
How do I set up CougarLock?
If you are not already enrolled in CougarLock, you will automatically be prompted to when you log in. The enrollment process will guide you through the processes; however you can also view this guide for additional help.
What Authenticator Apps can I use?
We recommend using 2FAS. This is a free, easy to use tool.
What happens if I lose or break my phone and can’t get the token?
Please use the one time codes you saved during the Cougar Lock set up to access your account. At your next earliest convenience, please reach out to [email protected] to get a CougarLock reset. IT will confirm your identity and reset your CougarLock, generating a new QR code you can scan in the 2FAS app to get new codes.
What happens when someone loses their phone and does not have their recovery codes?
Please reach out to [email protected]. After verifying the identity of the person with the same criteria used to reset passwords, the Support Center will be authorized to reset the CougarLock for the account, which will allow the account holder to re-setup MFA.
What is the most common issue seen after MFA has been set up?
Sometimes, people do not print/save out their recovery codes. Because of this, when a phone is lost or a new phone needs to be configured the CougarLock will need to be reset.
How often will I need to authenticate CougarLock?
This depends on your browser's cookie settings. For most people, you will only be prompted to enter a six-digit code from your authenticator app if you are signing into your APU account using a new device, a new browser, or a browser without browsing data (such as a private/incognito window).
