text:
Two-Factor Authentication - 2FA
Two-Factor Authentication (2FA) from Duo
Double up on security by protecting your applications and environments with two-factor authentication (2FA). It's the simplest, most effective way to verify that your users are who they say they are.
Two-factor authentication (2FA) is a specific type of multi-factor authentication (MFA) that strengthens access security by requiring two methods (also referred to as authentication factors) to verify your identity. These factors can include something you know - like a username and password - plus something you have - like a smartphone app - to approve authentication requests.
2FA protects against phishing, social engineering and password brute-force attacks and secures your logins from attackers exploiting weak or stolen credentials.
Why is 2FA Important?
Two-factor authentication (2FA) is the foundational element of a zero trust security model. In order to protect sensitive data, you must verify that the users trying to access that data are who they say they are. 2FA is an effective way to protect against many security threats that target user passwords and accounts, such as phishing, brute-force attacks, credential exploitation and more.
Let's say you use a username and password to complete primary authentication to an application. That information is sent over the Internet (your primary network). You'll want to use a different (out-of-band) channel to complete your second factor. Approving a push notification sent over your mobile network is an example of out-of-band authentication.
So why does it matter? If a remote attacker is able to tap into your computer via your Internet connection, they can steal your password, and your second form of authentication — if both are delivered over the same channel.
Without your physical device, remote attackers can't pretend to be you in order to gain unauthorized access to corporate networks, cloud storage, financial information, etc. stored in applications.
By integrating two-factor authentication with your applications, attackers are unable to access your accounts without possessing your physical device needed to complete the second factor.
2FA Made Easy With Duo
We know the most effective security solution is one your users actually use.
Duo's 2FA solution only requires your users to carry one device — their smartphone, with the Duo Mobile app installed on it. Duo Mobile is available for both iPhones and Android, as well as wearables like the Apple Watch.
With support for a large array of authentication methods, logging in via push notification is fast and easy with Duo Mobile. We strongly recommend using Duo Push or U2F as your second factor, because they're most secure and can protect against man-in-the-middle (MITM) attacks, but with Duo's flexibility and customizability, you'll be able to find the adaptive authentication method that meets the unique needs of your diverse user base.
Easy_Icon-01
Easy, Effective and Secure
Duo integrates to protect every point of access, from on-premises, to web-based, to cloud-based applications. Deployment is quick and easy, and the platform's user-friendly authentication experience and intuitive administrator dashboard make managing your security protocols a breeze.
zero_trust_icon
Zero Trust Made Simple
Duo puts your organization on the fast-track to zero trust by securing the modern workforce. The simple, all-in-one platform lets you verify user identities, assess and act on the health of devices, set adaptive access policies, and protect users' productivity with modern remote access and SSO capabilities. Learn more about Duo's approach to zero trust here.
Every_business_icon
2FA For Every Business
At Duo, we believe every organization should have a 2FA solution, so we take pride in providing a simple, yet scalable, security platform that works. With three editions and a host of capabilities built in, you can choose the solution that's just perfect for your business. See editions and pricing here.
Learn More About 2FA
Need more information to get up to speed on 2FA basics and security industry terminology? We're here to help. Below, you'll find answers to your questions and resources to help you take the next steps toward a more secure workforce.
What are the Factors of Authentication?
Factors are the pieces of information a user can provide to verify their identity. 2FA is the most commonly used, but there are, in fact, five factors of authentication used by security professionals today.
Knowledge Factor
The knowledge factor verifies identity by requesting information only an individual user would know. The most common example of a knowledge factor of authentication is a password. A user's password should be private only to them, allowing them to use it as a method to confirm their identity.
Possession Factor
Possession factors verify the identity of a user by requiring proof of information that only the user should possess. Tokens are a commonly used possession factor of authentication. These tokens generate a rotating passcode that users must physically carry on their person.
Duo Mobile combines the knowledge factor and possession factor of authentication to create the world's most trusted 2FA platform. Two other possession factors of authentication are HMAC-based One-Time Password (HOTP) and Time-based One-time Password (TOTP). Both authentication methods generate temporary passwords from a physical device carried by the user. HOTP tokens expire once they are used while TOTP tokens expire if not used within thirty seconds.
Inherence Factor
Inherence factors of authentication verify the identity of a user by using attributes that would belong only to that user. Fingerprint scanning is the most obvious inherence factor used today.
Fingerprints are unique to individuals, so many organizations use them as a way to confirm who their users are. In addition to fingerprints, there are many other inherence factors used today: voice, handprints, face recognition, and more.
Location Factor
Location factors of authentication confirm the identity of a user based on their location in the world. If a user had registered an account in one country, for example, and suddenly there are login attempts from another, location factors could trigger and attempt to verify the identity of the new user. Many location factors are based on the IP address of the original user and compares the address to that of the new attempt to access information.
Time factors of authentication verify the identity of a user by challenging the time of the access attempt. This is based on the assumption that certain behaviors (like logging into a work computer) should happen within predictable time ranges. If an attempt to access a platform happens outside of the usual time range, the attempt can be challenged or terminated until a user can verify their identity.
What Threats Does 2FA Address?
The need for two-factor authentication has increased as companies, governments, and the public realize that passwords alone are not secure enough to protect user accounts in the current technical landscape. In fact, the average cost of data breaches today is over two trillion dollars annually. While 2FA protects against a multitude of threats, the most common threats include:
Stolen Passwords
A traditional password can be used by anybody who gets their hands on it. If a user writes down their password on a pad of paper, for example, that password can be stolen to gain access to an account. 2FA, by contrast, validates the user with a second device after a password is entered.
Phishing Attempts
Hackers will often send emails that include links to malicious websites designed to either infect a user's computer or convince them to enter their passwords. Once obtained, a password can be used by whoever manages the hacking attempt. 2FA fights phishing by adding a second layer of validation after the password has been entered.
Hackers will often simply manipulate users into giving up their passwords. By posing as an IT professional at the user's company, they can earn the trust of the user before asking for login credentials. 2FA protects against this by validating the location and IP of every login attempt after a password has been entered.
Brute-Force Attacks
In a brute-force attack, a hacker randomly generates passwords for a specific computer until they land on the correct sequence. 2FA's second layer of protection requires a login attempt to be validated before granting access.
Key Logging
Even if a user hasn't written down their password, hackers can use malware to track and copy a user's password as they type. Hackers track every keystroke and store the password to be used later. The second layer of validation in 2FA lets a user ensure that the login attempt is their own, even if their password has been compromised.
What are the types of 2FA?
There are a number of different second factors that can be used to verify a user's identity. From passcodes to biometrics, the available options address a range of use cases and protection levels.
SMS 2FA
SMS two-factor authentication validates the identity of a user by texting a security code to their mobile device. The user then enters the code into the website or application to which they're authenticating.
Simplicity. SMS 2FA simply sends a confirmation code to a user's mobile phone. Just enter the code and gain access to your information.
Speed and access. If suspicious activity occurs, SMS 2FA sends a one-time password (OTP) to a user's device, so only the user with that device can log in and verify that their account hasn't been compromised. SMS 2FA is a quick way to validate the identity of a user.
Ubiquitousness. SMS 2FA is the oldest form of two factor authentication, so it has become a commonly accepted security protocol.
Phone number requirements. SMS 2FA requires that users disclose their phone numbers to a third party (the 2FA provider). This makes some people uncomfortable because it raises concerns around privacy, personal security, and being targeted for advertising.
Data network requirements. SMS 2FA requires a phone that can receive SMS messages. If a user's phone is missing or damaged, or if they cannot access their network, they may not be able to receive their security code.
TOTP 2FA
The Time-Based One Time Password (TOTP) 2FA method generates a key locally on the device a user is attempting to access. The security key is generally a QR code that the user scans with their mobile device to generate a series of numbers. The user then enters those numbers into the website or application to gain access. The passcodes generated by authenticators expire after a certain period of time, and a new one will be generated the next time a user logs in to an account. TOTP is part of the Open Authentication (OAUTH) security architecture.
Flexibility. This type of 2FA hinges on a QR code which generates a unique passcode. Once they have this code, a user can use it across multiple devices. By contrast, SMS 2FA is restricted to the device that receives the message. TOTP 2FA is more flexible and gives the user a wider ability to access their information.
Improved Access. Mobile authenticators are able to remember which accounts a user is trying to access — so the user can access their passcode at any time, even if they are not on a cellular or wifi network.
Reliance on devices. TOTP 2FA requires the user to have a device capable of reading the QR code to verify their identity. If the user misplaces their device or the QR code, or if it's stolen, they will no longer be able to access their information.
Push-Based 2FA
Push-based 2FA improves on SMS and TOTP 2FA by adding additional layers of security, while improving ease of use for end users. Push-based 2FA confirms a user's identity with multiple factors of authentication that other methods cannot. Duo Security is the leading provider of push-based 2FA.
Phishing security. Other types of two factor authentication are susceptible to phishing attacks, but push-based 2FA combats that vulnerability by replacing access codes with push notifications. When they attempt to access their information, a push notification is sent to the user's phone. The notification includes information about the login attempt, such as location, time, IP address, and more. The user simply confirms that the information is correct and uses their phone to accept the authentication request.
Ease of use. Once set up, push-based 2FA streamlines the authentication process. If the information sent through the push notification is correct, the user simply accepts the login attempt through their mobile device and is able to access their account.
Scalable. Push-based 2FA can easily be scaled for organizations needing to secure multiple users. The ease of use allows teams to onboard the software and train teams on how to use it efficiently. Since every access attempt is confirmed with a mobile device, there are no SMS codes to enter or QR codes to save.
Reliance on data access. Push-based 2FA sends its notifications through data networks like cellular or wifi networks. The user must have data access on their mobile device to use the 2FA functionality.
Reliance on user knowledge. Push-based 2FA fights phishing by allowing the user to validate the location and other details associated with the login attempt. Security breaches may occur in cases when the user doesn't pay attention to or correctly read information like the IP address and login location.
U2F Tokens
U2F tokens secure two-factor authentication by using a physical USB port to validate the location and identity of a user attempting to login. To use a U2F token, a user inserts the token into their device and presses the button located on the top of the device. Once the token is activated, the user enters their PIN and gains access to their accounts.
Phishing protection. Since the user must physically hold, insert, and enter a code into the token, U2F protects a user's PIN from being phished.
Backup devices and codes. U2F tokens can be backed up across multiple devices, allowing users to replace their token or code if it is lost.
Ease of use. U2F tokens require little set up or technical knowledge to use.
Lack of support. U2F tokens are still relatively new to the 2FA world, which means that many currently existing technologies do not support it.
Requires a physical object. As a physical token, this security method is susceptible to being lost or damaged. If a token is misplaced, for example, it cannot be used to authenticate a user's identity.
Created by the FIDO (Fast IDentity Online) Alliance and W3C, the Web Authentication API is a specification that enables strong, public key cryptography registration and authentication. WebAuthn (Web Authentication API) allows third parties like Duo to tap into built-in capabilities on laptops, smartphones, and browsers, letting users authenticate quickly and with the tools they already have at their fingertips.
Convenience. All you need is a supported web browser, operating system and authentication method -- such a biometric indicator, a security key (such as a Yubikey), or a system-local PIN -- for phishproof access.
More secure. WebAuthn is one of the more secure 2FA methods available today. It allows web applications to trust a strong biometric authentication as a credential that is specific only to that service — which means no more shared passwords. We now have a secure means to generate, store and utilize a credential whose attributes are unknown to the user and thus can't be stolen and exploited.
Complex account recovery. In the modern workplace, work doesn't stop when a security issue arises. Perhaps an employee loses their phone, or someone reports an unauthorized access attempt. Security measures help control these threats, but employees are expected to be back up and running and working as normal shortly after the incident. Many 2FA solutions make this relatively easy — a systems administrator can help with account recovery. A WebAuthn credential, however, is strongly tied to a specific individual device, making account restoration more difficult. For that reason, it's still recommended that users have another out-of-band form of authentication to fall back on, should they lose access to their WebAuthn authenticator.
Which industries use 2FA?
Endpoint security concerns are becoming a bigger focus for many industries — no matter which applications users are accessing, protecting credentials is important to the security of the larger business. Learn how various verticals are using 2FA to stay ahead of security threats:
Healthcare organizations are concerned about securing patient data and personally identifiable information (PII). They also need to meet a number of compliance requirements, including HIPAA, PCI DSS, HITRUST, Joint Commission standards and NIST standards.
The healthcare industry must also securely enable their clinicians and physicians to access patient data, at any time, anywhere - sometimes from their own personal devices. Duo's 2FA solution allows them to secure this data beyond traditional firewalls. Physicians, accountants, and third-party vendors can access their necessary information securely.
More on one enterprise healthcare CISO's journey with Duo
The banking industry uses 2FA to protect against the many hacking attempts made on their internal and clients' systems. Duo's push-based authentication system has helped many large banks improve their resiliency against such attacks.
It is important for security teams to know which users and devices are accessing their systems. Two-factor authentication allows the finance industry to secure remote devices and authenticate every login attempt.
How Level One Bank successfully implemented Duo's 2FA
Social media platforms and agencies use 2FA to protect the personal data of billions of users worldwide. To protect these users, social media companies like Facebook use Duo's push-based authentication to shield their developers from hacking attempts when working on the company's internal networks.
2FA also makes security easier for social media companies by simplifying the access process for developers. Duo's cloud-based 2FA solution protects developers, and users in turn, by eliminating the need for hardware and software installation.
How Facebook implemented Duo's 2FA
The travel industry requires a 2FA solution to allow their remote employees to perform their duties from anywhere in the world. Traditional security protocols like firewalls aren't sufficient when users need access beyond the security perimeters.
Duo's 2FA technology helps the travel industry implement true Bring Your Own Device (BYOD) policies. Duo Beyond lets travel companies understand the security health of every device accessing the network. Companies can then monitor potential security threats from remote devices.
How Kayak uses Duo's 2FA to secure endpoints
Current IT modernization initiatives are challenging government agencies to implement big changes to their infrastructure at an uncomfortable pace, as they look to accommodate the shift to cloud and mobile. An ideal security solution needs to account for both protecting users and rolling out on a realistic but still workable timeline.
2FA technology assists federal agencies as they put forward zero trust policies for the millions of end users who need access. Two-factor authentication provides a balance between strong security and usability.
How Duo helps federal government agencies achieve zero trust
With an annual U.S. GDP totalling $2.5 trillion, the retail industry is comprised of more than 3.6 million retail establishments. As the nation's largest employing industry, remote attacks have become increasingly more prevalent and difficult to prevent.
Similarly, security solutions are becoming increasingly important for retail as information technology adjusts to a perimeterless environment. 2FA allows retail companies to authenticate the identities of users accessing their networks through remote desktops and personal mobile devices.
How 2FA addresses security risks in the retail industry
The media industry spans across radio, television, social media, film, and more. 2FA helps media companies by allowing users to access the data necessary to meet publishing deadlines.
By securing IT infrastructures across companies and state lines, Duo's two-factor authentication technology gives media companies the ability to validate users' identities whenever a login is attempted. The push-based nature of 2FA reduces the friction and frustration that has historically plagued efforts to secure user endpoints.
How Duo's 2FA helped American Public Media manage security across many companies
Higher education institutions manage vast amounts of sensitive user data involving finance, healthcare, PII, and more. This valuable data has historically made institutions prime targets for hacking and malicious breaches of security.
Colleges and universities use 2FA to secure the mobile devices and personal computers of students, faculty and staff. Securing these devices helps combat malicious actors by authenticating the identity and location of every login attempt.
How Duo's 2FA helped the University of Michigan
With a heavy focus on rider safety, ridesharing apps are dependent on the security of the mobile devices accessing their network. To make it even more challenging, ridesharing apps serve an international and decentralized marketplace of users and drivers across hundreds of languages.
2FA technology helps ridesharing companies secure the endpoint devices of their employees regardless of location. Ensuring user identity is a mission critical objective for technology companies and 2FA assists this goal by authenticating employees before they gain access to internal information systems.
How Duo's 2FA helped Lyft scale a zero-trust security solution
Energy companies often need to secure data on sensitive projects across the world. 2FA technology helps them protect financial, logistical, and human resource systems by securing user endpoint devices.
Ensuring endpoint security allows projects to continue on schedule without risking security breaches. 2FA also helps energy companies by securing the devices of third-party contractors who often need IT system access while operating beyond the perimeter of traditional firewalls.
How Duo's 2FA helped AmeriGas accomplish its goals
Frequently Asked Questions About 2FA
Have questions about how 2FA works? Wondering how 2FA can help secure your accounts and applications? We've got answers.
Who uses 2FA?
Two factor authentication is used across many industries that require user authentication and device trust, beyond usernames and passwords. 2FA technology is often championed by an organization's security team, Chief Information Security Officer, or information technology team, but it affects departments throughout the business. Below is a list of the top five industries where 2FA is a crucial information security strategy:
Healthcare: Due to the incredibly sensitive personally identifiable information protected by hospitals and other healthcare organizations, two factor authentication is commonly used to secure user accounts (doctors, patients, administrative staff).
Finance: Financial institutions use 2FA to protect against data breaches and to comply with the growing security demands of users and auditors. The highly sensitive and valuable data protected by financial firms makes them prime targets for cyber criminals.
State & Federal Government: Both state and federal governments are under constant threat of cyber attacks. In response, governments are implementing two factor authentication in addition to traditional passwords. With 2FA, a hacker would have to capture an end user's mobile device, even if their password is compromised.
Education: Educational institutions from elementary schools to universities implement 2FA solutions to protect the data of their students and staff. Students, teachers, and administrators log into sensitive web portals with 2FA in addition to the traditional passwords.
Law Enforcement: Two factor authentication is used by government agencies of all sized — from the FBI, and CIA, down to local police departments in order to protect sensitive data. Law enforcement administrators can confirm the location, IP address, and username of any user attempting to log into their networks. This is another layer of protection against potential external threats.
How effective is 2FA?
2FA protects against phishing, social engineering and password brute-force attacks and secures your logins from attackers exploiting weak or stolen credentials. This dramatically improves the security of login attempts. 2FA has also been shown to block nearly all automated bot-related attacks.
About 81% of confirmed data breaches in the Accommodations industry involved stolen credentials. – Source: Verizon 2018 Data Breach Investigations Report
Which authentication method is best?
At Duo, we recommend push-based, U2F, and biometric authentication, because these make it very difficult for an attacker to pose as an authorized user.
Push-based 2FA: Most push-based authentications can't be approved unless a user's phone is unlocked. This requirement makes push-based 2FA more secure than passcode-based 2FA, which often delivers a code that can be seen on lock screens or other SMS-enabled devices. With push-based 2FA, simple security measures like a passcode or biometric identification go a long way, protecting applications with a layer of information only device owners would possess.
U2F: With U2F-based 2FA, users initiate an authentication request and then approve it by tapping a USB device attached to their laptop, desktop, or smartphone. Unlike traditional security tokens, U2F devices are tamper-proof. Each device is associated with only one user, preventing imposters from posing as a trusted user, even if the device is lost or stolen.
Webauthn: Like U2F-based authentication, Webauthn-based authentication requires users to approve access requests via a mechanism that's attached to their device. Webauthn, however, takes this principle even further by tapping into users' built-in biometric authenticators, negating the need for both passcodes and physical hardware. With Webauthn, the world of information security moves one step closer to true password-less authentication.
What's the difference between 2FA and MFA?
Two-factor authentication (2FA) is a subset of multi-factor authentication. There are as many potential factors of authentication as there are ways to confirm a user's identity (location, fingerprints, face, security keys), and any security protocol that involves three or more is considered MFA. 2FA is the most common and easily accessible subset of MFA that requires two factors of authentication.
How will 2FA improve my technical infrastructure?
2FA often reduces the need for device-specific or application-specific security tools, like MDMs. With 2FA, companies are able to protect a broader scope of information and technical environments, allowing them to consolidate and/or forego solutions that may not be adding to the overall security landscape. Reducing total cost of ownership is an ongoing initiative for many companies, especially when it comes to IT, and protecting more information with 2FA can drive progress toward that goal.
At Duo, we recognize the value of streamlining technical infrastructure, so we've built broad application and device coverage right into our 2FA solution. Learn more about how Duo helps make life easier for IT administrators.
Can I use 2FA in a hybrid environment?
The short answer is: "yes." Most companies need to protect both cloud-based and on-premesis applications, so it's smart for 2FA vendors to accommodate both types.
However, that doesn't mean all 2FA vendors can protect all applications. Some are tailored to specific productivity tools or require additional drivers or software to protect a greater breadth of information. Duo's 2FA solution is designed to work with the broadest range of applications and devices — so no matter what you need to protect, Duo can help.
How do I make sure my users keep their devices updated?
Rigorous device health standards are an essential part of any effective security framework. To truly be secure, every single device that requests access to an application should meet your organization's security standards. But depending on the complexity of your security protocols, it can be difficult to ensure every device has the latest operating system, has screenlock enabled, is properly encrypted — the list goes on.
Some 2FA solutions build in the option for device health checks, so administrators can warn users that unless they update their software or change their device settings, they'll be unable to access the services they need. Duo's self-remediation features are designed specifically to not only warn or block users based on device health, but to help users comply with security regulations without needing to get an IT professional involved.
The easier it is for users to meet security standards, the more likely they are to keep their devices compliant — saving administrators a lot of headaches over time.
What if a user loses their mobile device?
2FA relies on users to have a device with which to authenticate. If that smartphone or laptop is lost or stolen, there's a heightened risk that unauthorized entities will be able to access your important data. So, generally, users should be aware of their devices' locations at all times, and they should be cautious about letting others use their devices.
That's not a security guarantee, though — we've all lost (or thought we lost) a device or two somewhere along the road. It happens. Fortunately, 2FA technology can actually make it easier to protect the information to which those devices have access. Security solutions that install directly onto users' devices (MDMs, etc.) can often lock or shut down devices remotely, protecting mission-critical information even when a user doesn't physically have their device with them. Duo works similarly, but it doesn't require installation of any additional drivers or software. Users can easily self-enroll in 2FA via an app on their devices, so no matter where in the world they travel or what technology they use, your information stays secure.
Can I limit access to some applications but not others?
With a good adaptive authentication solution, yes! And as the security industry evolves, it becomes ever more important to do so. Remember, the goal of a security policy is to limit access to as few people as possible — and that concept applies at the application level, too. To truly reduce the possibility of a breach, each user should be able to authenticate to as few applications as possible, and their level of access should be based on the information they need to access.
What is a user access policy?
A user access policy is a specific set of rules that determine whether or not a user can access an application. For example, your company might have a policy that only users with a certain level of security clearance can access mission-critical information. A good 2FA solution will allow administrators to set these rules granularly, ensuring that only the right people, with the right devices and the right credentials, are accessing each individual application.The ultimate goal of a user access policy should be to grant access to as few users as possible. This means thinking critically about very general authorization parameters. It's likely that some applications will require more stringent protection than others, and that some devices will be more trustworthy than others — so access policies should take these factors into account. For example, applications that contain sensitive personal information may require a user to have both the correct security clearance and have their device firewall enabled. In contrast, collaboration tools like calendars may be accessible to more users and may not require that users' devices meet such specific criteria.
What is adaptive authentication?
The premise of adaptive authentication is that users circumstances are constantly changing — they move between networks, they change their device settings, they require additional application access, etc. — so authentication rules should constantly be adjusting to keep up.
A good adaptive authentication solution will allow users to set risk-based access policies over several dimensions:
By user or group of users and their roles and/or responsibilities.
By authentication method. Allow authentication only via approved methods. For example, users authenticating via push notification are granted access; users authenticating with SMS are not.
By application. For example, a company might want to enforce the use of the more secure MFA methods (push notification, U2F, etc.) for high-risk applications and services.
By geographic location. Restrict access to company resources in any geographic location.
Set conditional policies for certain locations. For example, a company may want to require 2FA in certain locations, but not in others.
By network information. Where the user/device is coming from (set of IP ranges); block authentication attempts from anonymous networks like Tor, proxies and VPNs.
Because adaptive authentication is only becoming more and more important, Duo makes it easy to set and monitor security policies based on any of these dimensions — and with Duo's intuitive administrator dashboard, administrators can do it all from a single, central control panel. Duo also integrates with existing technology, like Active Directory or Azure-AD, and can leverage them to apply policy at a group level.
How does 2FA protect BYOD?
Open wifi networks: 2FA protects against attempts to steal or phish your username and password via an open wifi network.
Man-in-the-Middle attacks: 2FA doesn't allow hackers to spoof push notifications to your personal device even if your password is compromised by a man-in-the-middle attack.
One password across many accounts: 2FA gives you an added layer of security via push notifications even if you have used the same password across multiple accounts.
Malware email attachments: Even if you fall prey to malware attachments, you can protect your login credentials by confirming every login attempt accessing your accounts.
Cloud storage: 2FA gives cloud users the ability to validate every login attempt with their personal devices, no matter where in the world they are. This becomes chokepoint that organizations can use to secure their data in the cloud.
How does 2FA work when my users are traveling?
In most cases, 2FA should work exactly the same way when you are traveling, as it would when you are at home. You enter your password, validate the login attempt with your push notification, and hit accept. There are two situations when two factor authentication won't work when traveling, however:
First, you will not be able to receive push notifications if you lose cell or wifi connection while traveling. Some wireless carriers may not have service in the area you are visiting, so be sure to confirm so before you travel.
The second issue that may cause 2FA to not work while traveling is if you lose your phone. Even with your password and username, you will be locked out of applications if you cannot receive a push notification with your phone.
What is zero trust, and how is 2FA related?
The zero-trust approach to security posits that location-based trust is no longer enough to prevent unauthorized access to applications and information. The traditional "perimeter," defined by known networks and environments, is being negated by BYOD and remote work — in the modern workplace, employees expect some freedom to work from different locations and use the devices they're most comfortable with. The zero trust model addresses these potential security issues by establishing trust for every access request — regardless of location. It enforces adaptive controls, and continuously verifies trust. Trust levels are dynamic and change to adapt to your evolving business. This approach can help prevent unauthorized access, contain breaches and reduce the risk of an attacker's lateral movement.
At Duo, we help businesses secure their workforces using a zero trust approach. This model can seem complex, because it up-ends traditional perimeter based security — but achieving zero trust can be done in just 5 steps:
Establish Trust in User Identities
Gain Visibility into Devices & Activity
Ensure Device Trustworthiness
Enforce Adaptive & Risk-Based Policies
Enable Secure Access to All Apps
For more on zero trust and how this approach can enable a more secure workforce, visit our zero trust page.
How do I increase 2FA adoption in my organization?
Get to know the numbers: 2FA technology exists to protect against the growing threat of cybersecurity breaches worldwide. According to a study by the University of Maryland, there is a hacking attack every 39 seconds. Knowing the how and why 2FA can impact your business is an important first step.
Work with stakeholders: Adopting two factor authentication requires buy-in from the entire company, but the decisions are often made by a select group. This group can be comprised by executives, your security team, your IT team, and anybody else who has a say in the adoption process. Understand who the important stakeholders are and work with them to magnify your impact.
Communicate the risks and benefits: once you know who needs to be on board with your adoption plan, frame the issue in terms that are important to each member. The company's CEO will have different priorities than the head of IT, for example. Knowing what is important to each stakeholder will go a long way in seeing your 2FA adoption through.
Understand the logistics: Rolling out a complete 2FA adoption will take time and involve some logistical challenges. Keeping your end goal in mind while navigating the process will help you see the adoption process through. Are your employees hesitant to download the 2FA app? Is your security team bogged down with work? Be sure to understand the potential roadblocks on your way to 2FA adoption.
How are other companies using 2FA to secure their information?
2FA technology has helped companies across many industries secure their user endpoints. Take a look at our extensive customer story page to see how.
How-To's For Users
Help your users get up and running with Duo.
How Do You Enable 2FA?
Two-factor authentication is simple to set up. There are seven simple steps to going live with 2FA.
Hit Set Up
Choose Your Authentication Device Type
Choose Platform
Install Duo Mobile
Activate Duo Mobile
Configure Device Options
Read our Guide to Two-Factor Authentication Enrollment to get started.
Can You Disable 2FA?
Yes, admins can disable any authentication method for users or administrators. For example, since NIST recommends SMS 2FA deprecation, some may not want to allow end users to authenticate via SMS.
In the Policies section of the Duo Admin Panel, you can choose the authentication methods from the global, application, and group policy level. More information is available in our documentation.
How can I get a 2FA Code?
For all application integrations, Duo uses HOTP, or HMAC-based one-time password (OTP) to generate passcodes for authentication.
Duo Mobile allows users to generate event-based passcodes that are valid until they have been used. Duo also supports the use of most HOTP-compatible hardware tokens for two-factor authentication.
Read more about 2FA basics.
What if I get locked out?
Duo Mobile's restore functionality lets you back up Duo-protected accounts and third-party OTP accounts (such as Google or Facebook) for recovery to the same device or to a new device. You can use this back up functionality to recover your account.
What are the system requirements for 2FA?
Please reference our docs section for information regarding our minimum system requirements.
Can I use 2FA on an older mobile phones?
Android: the current version of Duo Mobile supports Android 7.0 and greater. Duo recommends upgrading to the most recent version of Android available for your device. We cannot ensure compatibility of Duo Mobile with custom variants or distributions of Android.
iPhone: The current version of Duo Mobile supports iOS 11.0 and greater. Support for older Duo Mobile versions on iOS 10.0 ended July 28, 2019.
What if I don't recognize the location shown?
If you do not recognize the location shown by your 2FA push notification, do not click allow. If you do, the potentially malicious login attempt will have access to your account. If you suspect anything, deny the login attempt and speak with your organization's system administrator.
Can I set up 2FA of multiple devices?
Yes, you can set up 2FA on multiple devices. You can also use a landline or tablet, or ask your administrator for a hardware token. Duo lets you link multiple devices to your account, so you can use your mobile phone and a landline, a landline and a hardware token, two different mobile devices, etc.
Can I turn off 2FA after I have turned it on?
Please reference the managing devices section of our guide.
How do I remove 2FA?
Two-Factor Authentication Evaluation Guide
This guide walks through some of the key areas of differentiation between two-factor authentication solutions and provides some concrete criteria for evaluating technologies and vendors.


Dubai Electricity and Water Authority (Dewa) has completed 82 per cent of the M-Station expansion project, the newest and largest electricity generation and water desalination plant in the UAE.
Saeed Mohammed Al Tayer, MD & CEO of Dewa was briefed by Siemens' representatives on the construction, engineering, and operational progress of the expansion project, which is going according to schedule. To date, most of the civil work has been done, and 10.9 million safe man-hours recorded without any injuries.
M-Station is the newest and largest electricity generation and water desalination plant in the UAE, with a current total capacity of 2,185MW of electricity and 140 million imperial gallons of desalinated water per day (MIGD). The station adopts the highest levels of availability, reliability, and efficiency, using the most advanced technologies in the world. The station's total capacity will reach 2,885MW when the expansion project is completed in Q3 of 2018.
The station includes the provision of new power generating units, adding 700MW to the installed generation capacity of M-Station. The expansion project includes the addition of two dual-fuel gas turbine generators, two heat-recovery steam boilers, and a steam turbine that is 90 per cent-fuel-efficient. This will increase the plant's thermal efficiency from 82.4 per cent to 85.8 per cent, which is one of the highest thermal-efficiency rates in the world.
Since 2015, Dewa has been working with Siemens on the Jebel Ali M-Station expansion, as the combined total cost of M-Station construction and expansion is Dh11.5 billion ($3.1 billion). M-Station is equipped with the latest smart devices and sophisticated heavy-duty technological systems. It was built at a cost of Dh10.15 billion. Dh6.2 billion were invested to generate 2,185MW of electricity from 6 gas turbines (F-model) from Siemens, with a capacity of 255MW for each unit, 6 boilers for waste-heat recovery and 3 steam turbines, with a capacity of 218MW each.
The project has been implemented in phases since mid-2010. Water desalination systems costing Dh3.95 billion use 8 desalination units, deploying Multi-Stage Flash (MSF) distillation technology, each with a capacity of 17.5 MIGD and totalling 140 MIGD, two dual-fuel-fired auxiliary boilers of 390 tonnes per hour, and 16 fuel-oil storage tanks, each with a capacity of 20,000 cubic metres, with total fuel-oil storage of 320,000 cubic metres.


I was so naive and unprepared when I went for my first beauty/wellness service at a Singapore spa. In the US, I had only been to one other spa prior to moving here. My spa experiences between the two countries were like night and day. This is because in the US, hard selling is not common. To be honest, I had never encountered a hard sell before in my life… that is, until I bought two vouchers from Groupon.sg , one for a massage and another for a slimming session.
The steeply discounted offers enticed me to try out their services. However, I soon realized that such promotional offers were a company's bait. And that I naively took the bait and was about to get lured in. The slimming centre salesperson employed tactics like guilt, shame, pressure, and even ridicule. The massage centre salesperson was slightly nicer, but still tried her best to wear me out and waste my time.
I think the reason why hard selling is so effective against unsuspecting and unprepared victims is because salespeople prey on four main attributes that seem to resonate very strongly with Singaporean culture. Knowing this might help you mentally prepare and see through their guise.
1. "Kiasu" (i.e., fear of losing or missing an opportunity). These wellness centres have ridiculously high prices on their brochures and websites. They will tell you that this is their usual price, but "for today only" they will offer you a 40% or 50% discount if you pay in full for a package, or at the very least, make a sizable non-refundable deposit. The time-sensitive discount appeals to the "kiasu" mentality. Who doesn't want a good deal? What they don't tell you is that once you sign for a package, they will keep up-selling you more and more products and services until you become a long-term, maybe even lifelong, "high-roller".
2. Guilt. They want to make you feel like you cheated them, since what they give you was valued at so much more than what you paid (if you're using a trial or voucher). If they can successfully make you feel like you owe them something, they are in a good position to ask you to spend a bit more and buy a package. If you think their packages are well priced, worth the upfront cost, and you are able to fully utilize them, then by all means, go ahead and buy them. Just don't buy anything purely out of guilt.
3. Your friendliness and need to please people. If they sense that you have low self-esteem, they will prey on your need to be liked, and your unwillingness to disappoint others. These salespeople will be so sweet to you (as if you were their best friend) if you just buy their package. But if you don't, they can become very nasty. But who cares, right? You'll probably never see these people again. So what if they think you're evil, cheap, ugly, fat, rude, selfish, and annoying. It's nothing personal. Even if they think you're an angel, as soon as they make the sale, they'll quickly forget about you and move on to the next prey.
4. Your desire to stay relaxed. The last tactic may not actually be intentional. But I've experienced this many times, especially in massage centres. After you've been soften up and are in a calm, relaxing state of mind, they start to aggressive push their sale. At that very moment, all you want from them is to leave you in that blissful zen-like state. But they simply won't let that happen unless you fork over more money. This is why some people say they leave these centres in a more stressful state than when they came in.
1. "My spouse controls the money." I tell them that because my husband earns more, he makes all financial decisions that exceed $50. This is a lie, of course. If you want to be even more convincing (and sharpen your acting skills), you can say that your spouse controls the money because you've had problems in the past making impulsive financial decisions that have put your marriage at risk. I've never had to go there, but I've gone as far as to phone my husband and talk to him in front of the salesperson. He knows that I'm going to do this so he just plays along. I sometimes will hand the phone over to the salesperson. But they usually will refuse confrontation with my husband, and let me leave.
2. "I'll have to pray about it." You just can't argue with religious inclinations, especially those that seem very admirable. Sometimes salespeople will ask, "Why do you need to pray about it?". But they've never gone as far as to say "I think God wants you to buy this." Then once I'm free to go, I usually will end the conversation with a lot of thanks, compliments, kind words, and blessings to the salesperson. This excuse is quick and effective and leaves both parties feeling pretty good.
3. Go empty-handed. If you easily give into temptation, and don't mind the evil glares, go empty-handed. Leave your wallet and money at home. Just bring your IC and the voucher. Or if you're paying for a trial, bring the exact amount in cash (don't forget GST) and nothing extra. That way, even if you want to buy their expensive package, you'll have to wait. You'll have no chance to make an on-the-spot impulsive purchase. If on your way home, you later realise you really wanted to buy the package, you could always call and pay over the phone.
If you are interested in buying a package, but want their best offer or want a smaller package, the next set of strategies can be very effective in achieving this.
1. "My husband just bought me a package elsewhere." I tell them that I would absolutely love to buy their package, but was just given (as a gift) another package elsewhere. To be convincing, I'll mention a specific spa, package, and price. Make them think you've already spent way too much on wellness services, and they will try to sell you a smaller package and/or offer you a more competitively priced deal. You could keep playing hard to get until they give you their very best offer.
2. "Money is not an issue. I need flexibility more than I need a discount." This may seem contrary to what you're trying to achieve, but if you make it seem like the time commitment or location is just way too inconvenient (something they cannot easily verify or argue against), they will try to compensate by making an even better offer to offset these downsides.
I know some people think I'm taking advantage of these places by only buying their promotional services. But these companies willingly and purposely offer such deeply discounted promotions with no minimum spending requirement. Some people might think that these strategies are low, dirty, and unethical. Likewise, I can say that it is quite unethical to pressure someone into buying something, knowing full well that they have reservations or are uneasy with the purchase.
For the record, I've only gotten two massages, two slimming session, and one facial. For each of these services, I paid an amount that I considered to be fair. It is not my intention to take advantage of these places. I simply want to buy good services, on an as-needed basis. And not be committed to an expensive package or be constantly given hard-sells or up-sells. Personally, I wish there were more places that just offered good, affordable a la carte services without up-selling or hard-selling of packages.
Fortunately, I managed to find a place that's cheap and does not use hard-selling tactics. You can read about that place here.
I hate hard sale from Spa, the seller is keep talking, after that I won't come back to their service.


Unfortunately, electronic systems to prescribe in-office administered medications, especially biologic and specialty medications that are given intravenously or by injection under provider supervision, have still not evolved much in the healthcare system. Most current EMR and practice management systems don't have the necessary templates to accommodate what most providers would call a complete infusion or injection order/script for these medications.
Medication, Route, Dose, Frequency, and Duration are the foundations of any medication order, but for most Specialty and Biologic medications, the orders need to contain much more information than the typical prescription pad Rx. Many of these specialty medications have additional provider instructions specific to the medication and diagnosis and uniquely ordered for the patient for which the medication is prescribed. Most traditional EMR's cannot provide the nurse with all the necessary information for these complicated medications in a concise manner.
Many issues exist when prescribing a biologic. The provider is concerned that the patient receives the medication as prescribed. As nurses, we are concerned about potential allergic reactions, IV access, and other existing health conditions. The provider's order will be complex, attending to all the issues that may arise during and after the infusion.
Managing a possible reaction to some infusion medications necessitates the administration of pre-medications. For example, if a drug has significant potential to cause hypersensitive reactions, or there is a known allergic response to that drug, then a pre-medication will more than likely be ordered. Using a pre-medication may allow the patient to continue receiving the drug even though they are hypersensitive. Many of the biologic medications have recommended or provider preferred pre-medications that can reduce or eliminate the potential for adverse reactions. The pre-medications might be oral products like Tylenol, Benadryl, etc or additional intravenous (IV) pre-medications like IV Benadryl or IV Solu-Medrol. For each of these ordered pre-meds, there will be required fields for Medication, Route, Dose, etc. on the order form.
In addition to pre-medications, the provider might also choose to authorize the use of some "as-needed" or "PRN" medications to be given in the event of patient discomfort or possible infusion-related reactions. For example, a provider might choose to order Ondansetron (Zofran) 4mg IVP in the event the patient becomes nauseated during the primary treatment. Some providers also choose to include authorization for emergency medications or protocols in the event of a serious infusion/injection-related reaction.
Specific monitoring instructions may also be a provided for during or after the ordered treatment. Some providers may want vital signs for blood pressure checked every 15 minutes while others might want the treatment stopped altogether if the BP exceeds a specified threshold. It is common for providers to request post-infusion/injection treatment observation for some medications known to have delayed treatment reactions up to an hour or more.
Manufacturer recommendations and provider preference can also play a part in the pre- or post-treatment requirements for specific medications. Some providers will give instruction for diagnostic testing (Tuberculosis (TB) screening as an example), Labs, or other clinical tasks either before or after each treatment.
As you can see, the infusion/injection order is typically much more complex than commonly prescribed oral medications. Infusion orders require clear and accurate communication between the ordering provider and every member of the infusion patient's care team. This is especially true when the ordering provider is providing a treatment order to an outside facility or Infusion Center that is not directly within the provider's own practice office location.
Over the years we found that having accurate, clear, and complete infusion/injection orders from the ordering provider were key in our ability to efficiently and safely treat patients in the Infusion Center. If the ordering providers have the capability to create a complete medication order, this will limit the frustration and confusion for everyone involved in the patient's care. This capability benefits the ordering provider as well so they don't have to answer 30 questions after they write their first medication order. In addition, multiple versions of the order are less likely to get created in separate parts. Preprinted order forms also improve documentation for utilization and reimbursement purposes as they help non-clinical staff members more easily identify the provider's intentions.
For the benefit of the ordering provider and everyone involved, WeInfuse has created standardized and customized infusion/injection preprinted order forms. These forms benefit the provider because most of the "best practice" information needed by the clinical and financial team members is printed on the form with easy to use options. Not every provider will remember to order labs with zoledronic acid for osteoporosis or that they can order IV methylprednisolone (Solu-Medrol) with Lemtrada infusion orders. The order forms benefit the office staff and infusion nurses because they can clearly understand the ordering provider's intentions and won't be tempted to translate or infer certain parts of the provider's patient order.
Ordering Provider adoption of these medication-specific forms is key to updating and improving your infusion patient workflow. Be sure that any order forms used in the practice are easy to read, clearly labeled, and present concrete options for each possible choice or protocol. Having the order forms available in paper is helpful for certain providers while some will prefer an electronic or fillable format.
WEINFUSE INFUSION ORDER FORMS ARE AVAILABLE FOR FREE!
To help you get started, WeInfuse has created a number of medication-specific order forms in PDF format that you can download and use for FREE from our website. These order forms have the most common pre-medications and protocols for many of the biologic, IVIG, and specialty medications on the market. These order forms can be printed and filled in manually or they can be electronically completed using most free PDF viewers.
For WeInfuse customers, we customize these forms to the specific request of the customer's protocols and providers to make the ordering process even easier on the practice. These customized order forms also make it easy to intake orders into our medication-specific order intake module within the WeInfuse application.
Whether you are using a WeInfuse order form or your own practice created order forms, the importance of a clear and complete treatment order is key to your practice's clinical and financial success. As a nurse, having a form that leaves no question as to the provider's order is of utmost importance.
If you would like to learn more about how WeInfuse can help you and your practice "Infuse Better", please Contact Us at sales@weinfuse.com or connect with us through our website at https://weinfuse.com and Request a Demo.


Eat: Yes, munching and swallowing healthy food is a solution to almost every health related issue one may face. Intake of proteins, Vitamins and iron is the key to a fit and fat-free body. Get your omega-3's which are prevalent in foods like fish(salmon, herring and tuna) which will help reduce inflammation and regulate your metabolism. Other foods that will help in regulating your metabolism are: 1. Lean meat 2. Chili peppers 3. Coffee 4. Green Tea 4. Whole grains It's not only important to gobble up these foods but also at regular intervals of time- when they're meant to be ingested.
Gulp as much water as you can: Want to increase the capability of your body to burn down fat? Gulp as much water as you can. According to a recent study, drinking water increases your metabolic rate by 30%. Dehydration may pave way for hunger pangs and trick your mind into believing that your body craves calories- No, it doesn't. Water is your vehicle for draining fat out of your body and creating a healthy and lean physique.
Rev it up naturally: Inspite of all the ways that stimulate your metabolism, one would any day want to choose something which has quick results that too without any side effects. Keeping this need in mind, Sanat has manufactured various herbal tablets that help in boosting your metabolism, losing weight and converting the fat of your body into energy, that too without any side effects. Its main aim is the satisfaction of its customers with cent percent results. One such tablet is 'Sunova Spirulina'. It's the richest source of protein and provides 18 out of 22 amino acids. Not only adults, but it is equally beneficial for children as well. Two tablets a day, and you'll be on your feet- energetic and fit.
Sweat Everyday: A slice of pizza down your throat and guilt is already making you sweat. No, this guilt is not what should make you sweat- it's exercise. Studies say that exercising for at least one hour everyday keeps your body in a healthy state, and makes your glands work more efficiently. Thus, a jog in the park or a run on the tracks will only do you good and ease the process of draining the fat in the pizza and leaving behind an attended and cleansed mechanism.
Find a stress buster: Your boss screaming his lungs out at your workplace, piling your desk up with loads of files to complete and you've just got a restricted amount of time- scary much? This doesn't mean you'd sulk in your chair, or munch a packet of wafers to let go of the depression the strain at work has caused you. Instead, indulge into something that soothes the restlessness inside you and also benefits you in some way or the other. Listen to music, start regular practice of yoga, meditate or just breathe deeply in the moment. Stress can cause your metabolism to slow down and that's not what we're aiming at.
If you don't want yourself sweating over a chocolate-chip cookie filled with caramel which your poor stomach craved for after a hectic day, get started!


Living healthfully with diabetes at every stage in life means being aware of your body's, and your condition's, changing demands as you grow older. These strategies for managing your diabetes at every stage of your development are ways to lower blood sugar and will help keep you at your best. Be sure to test for healthy glucose levels and follow the diabetes management plan set by your healthcare professional.
Get exercise to improve your body's sensitivity to insulin and blood glucose control. Exercise and blood sugar are related.
Stay aware of your blood glucose levels when your school or after school activity schedule changes.
If meal times become irregular, test your blood glucose to see if your levels are safe or if you need a snack to keep going.
If you're trying to lose weight, ask your healthcare professional how testing can help you balance a smaller food intake.
Help your child monitor his or her health with regular blood tests done at the clinic and at home.
Try not to stress about your child with diabetes. Seek out advice from a healthcare professional.
Communicate and work with your child and healthcare professionals to achieve healthy glucose levels.
Be supportive and actively look out for signs of depression or tiredness in your child.
Keep your blood glucose well controlled to stay energetic.
Choose dietary carbohydrates that are higher in fiber and less refined to better manage your blood glucose levels.
Keep stress under control as it may cause your blood glucose to rise. Staying calm is one of the ways to lower blood sugar.
In case you fall sick, make sure to consult with your healthcare professional to have a plan in place.
Take care of your feet every day by checking for blisters, cuts or scratches.
Keep your feet clean and dry, especially the area between your toes.
People with diabetes are at higher risk of developing diabetic retinopathy, cataracts and glaucoma. Have your eyes checked at least once a year and more often if there are signs of eye disease.


Scuba School International (SSI) is a worldwide organization, represented in more than 110 countries and proposing instructions in more than 25 languages.
It's your chance to discover unknown worlds, make new friends, and enjoy a passion !!!!!
A medical statement with no contraindication to scuba dive is obligatory (not older than 1 year).
Pool or confined water sessions and 3 dives in the sea at a depth between 5 and 12 meters.
The Junior Scuba / Scuba Diver can dive in open water till 12 meters under supervision of a Dive Leader or Instructor.
Pool or confined water sessions and 5 dives in the sea at a maximal depth of 18 meters.
Enrolling for speciality programms is the best way to become more confident and havind more fun. Some speciality courses are adapted for Junios Open Water Divers.
Be prepared for those unexpected emergencies. The Stress & Rescue programm will teach you about accident prevention and how to handle situations that might occur.
Be a least certified Open Water Diver or equivalent.
Have a valid CPR, First Aid & Oxygen Provider certificate.
Scenario dives in pool or confined waters and 4 dives in open water with exercises.
The Stress & Rescue Diver avoid, recognize and solve the problems on surface and underwater.
Be certified Junior Open Water Diver/Open Water Diver or equivalent.
At least 2 dives in open water.
The Boat Diving speciality allows you to know every diving techniques to dive from a boat and how to choose the right travel agencies for boat diving.
The Navigation Speciality teach the diver how to use a compass and how to apply natural navigation skills so he/she always find the most beautiful spots and find back the exit point or the boat.
Be certified Open Water Diver or equivalent.
The Deep Dive course will provide you with the skills, knowledge and experience required to dive safely and comfortably in depth below 18 meters.


ICP Industrial Inc. (Itasca, Illinois), a division of Innovative Chemical Products Group (the ICP Group), and a global leader in specialty coatings for the packaging, labeling and printing industries (with leading brands Nicoat and MinusNine Technologies), has announced the formation of ICP Industrial Canada Inc. along with a strategic partnership with Divicor – a manufacturers' representative firm based in Montreal, Quebec servicing the Canadian market. With manufacturing operations in the United States and Mexico, the additional footprint in Canada will serve as a compliment to its international growth strategy. By forming ICP Industrial Canada, the company added, the group will also have the ability to better service its growing customer base and offer "an unmatched" product portfolio.
About the ICP Group. Innovative Chemical Products (ICP Group) is a leading specialty chemical company engaged in the formulation, manufacturing and marketing of coatings, adhesives, sealants and elastomers (CASE). With operations headquartered in Andover Massachusetts, and divisional headquarters in Massachusetts, Ohio, and Illinois, ICP serves multiple end markets – including OEMs, industrial, building materials, packaging, printing, specialty construction and sports surfaces. ICP Group is a privately held firm and manufactures products under several widely recognized specialty brands.


text:
News + Recognition
Contact/Give
The team.
Amar Sahay, Ph.D., Principal Investigator
Associate Professor, Principal Faculty, Harvard Stem Cell Institute
Associate Member, BROAD Institute of Harvard and MIT
James and Audrey Foster MGH Research Scholar
BIO and Research Narrative
Amar's scientific interests evolved from fundamental mechanisms underlying cell-fate specification and embryonic patterning (undergraduate @Bennington College) to signal transduction (Gap year research fellowship, Lab of Yosef Yarden, Weizmann Institute) to interrogating neural circuit formation (graduate student in the labs of Alex Kolodkin and David Ginty at Johns Hopkins). Keen to probe how neural circuits relate to behavior in health and disease, Amar did postdoctoral work in Rene Hen's lab at Columbia investigating the functions of adult-born dentate granule neurons in memory and this continues to be a central focus in the Sahay lab.
Q 1. What excites you about being a scientist?
The joy and priviledge of contributing to our understanding of life.
Q 2. What inspired you to go into science?
Learning about Mendel and genes in eighth grade.
Q 3. In another life what other vocation would you choose and why?
A chef or a writer of fiction to create culinary experiences and characters.
Q 4. Make one prediction of how science will change health or living in the next 20 years.
Sophisticated neural and genetic prosthetics and artificial organ systems will profoundly impact strategies to enhance brain and organ functions. Think Singularity.
Ain Chung, Ph.D, Postdoctoral Fellow
Jason Alipio, Ph.D, Postdoctoral Fellow BIO
PhD with Andre Fenton (NYU)
When I see significant experimental results fitting together, therefore the outcome explains a mechanism underlies a phenomenon logically.
Intro to Neuroscience class in sophomore year.
A watchmaker or a plastic surgeon. I enjoy putting sophisticated things together to make a fully functional and beautiful outcome.
I predict there will be an innovation in diagnostic technology by big data analysis. Everyone will know their life expectancy at birth, therefore, healthcare companies will support individual healthcare plans from birth.
Yu-Tzu Shih, Ph.D., Postdoctoral fellow, Taiwan Ministry Science & tech Fellow, 2021 MGH Tosteson Fellow
US Marine Corps (Afghanistan)->2012-2016 GI Bill Cal State San Bernadino->R25 Meyerhoff Graduate Fellowship, F31 NIDA during PhD with Dr. Asaf Keller, Dept. Neuroscience at Univ of Maryland, Baltimore
Doing something I enjoy and am passionate about that contributes to improving the lives of others.
Observing the mental health of friends and loved ones deteriorate and a lack of effective treatment options for them.
SWAT team member in a large city. I think I would do well with the physical and mental demands.
I predict that individual tailored therapeutics will improve in parallel with genetic tools and the growth of data processing speed.
Yu-Tzu grew up in Taiwan and trained as a medical technologist in college. During those years, she spent a lot of time studying viruses and was intrigued by the link between viral infection in the brain and cognitive impairments. Towards her doctorate, she focused on molecular mechanisms underlying dendritic spine formation and their contributions to cognition.
Trying my best to help people in need.
In third grade, I took care of a relative who was hospitalized and I realized that there are many ineffective therapies for human diseases.
Running a homestay or vacation rentals. I believe that staying away from stress for a while is good for our brain.
Personalized diagnosis and treatment will become widely accessible and feasible. Because we are living longer than before, we will discover new age-related diseases that will challenge scientists.
Cinzia Vicidomini, Ph.D., Postdoctoral fellow, 2018 NARSAD YI Awardee, 2021 MGH Tosteson Fellow
The opportunity to use one characteristic of my personality, curiosity, to explore the unknown.
One of my favourite movies is Jurassic park. I discovered the power of DNA when a drop of blood from a jurassic mosquito gave life to an extinct species.
Travel journalist to explore many places all over the world.
I am pretty sure that genome editing technology will revolutionize the treatment of different human diseases.Q 4. Make one prediction of how science will change health or living in the next 20 years.
Hannah Twarkowski, Ph.D, Postdoctoral Fellow, DFG Postdoctoral Fellow BIO
Being in a creative environment every day and opening new doors to understand the thousands of miracles our brain performs every day some of them without us even noticing.
Listening for the first time to the firing of a FEF neuron during a delayed-saccade task. With my eyes closed, I was able to tell when the animal did the saccade this was when I knew I want to go into neuroscience.
Probably I would have become an actress. It is a different form of being creative and gaining insight into brains – only here those brains of other characters.
I think science will affect the diagnostic approach for many diseases and uncover surprising links between some of them. Prevention or very early diagnostic will probably gain more importance. However, I think it is highly important for scientists, medical staff and politicians to re-think the ethical, legal, and psychological responsibilities that come along with those amazing new tools.
Travis D. Goode, Ph.D, Postdoctoral Fellow. 2020 NARSAD Young Investigator BIO
Raised in Tennessee, Travis earned his bachelor's degree in psychology from the University of Tennessee. As an undergrad, he had humble beginnings as a research assistant in the behavioral neuroscience laboratory of Dr. Matthew Cooper. Subsequently, he completed his doctorate in neuroscience in the emotion and memory systems laboratory of Dr. Stephen Maren at Texas A&M University. Travis' primary scientific interests are in the neurobiological bases of aversively motivated memories, and in the meaningful translation of animal research.
I am grateful to be able to learn something new every day, all the while helping society by contributing to humanity's knowledge of the workings of the brain.
Like many families, my family experienced the hardships of addiction. In turn, I am passionate about alleviating the burdens of mental illness. I see neuroscience research as an important tool in combating these issues.
While I enjoy the lab, I'm an avid guitar player; I'd love to play in a touring rock band.
What used to be the stuff of science-fiction is increasingly just real science! In the next two decades, I would not be surprised if we see considerable advancements in pharmacotherapeutic interventions for at least some psychiatric illnesses. I believe this will occur in part through the advent and innovative use of neuroscientific tools. Rather than bathe the entire brain in treatment, I believe we will be better able to target problem sites and mechanisms that are at the heart of the disorder. Accordingly, a fundamental understanding of the psychological, biological, and genetic factors that contribute to such illnesses is critical!
Michael Kritzer-Cheren, M.D. Ph.D Instructor Psychiatry MGH, T32 Translational Neuroscience for Clinicians, 2021 Dupont Warren Fellowship and Livingston Award
Bill Meara, BSc Lab Tech/Manager
Mike received his medical and graduate degrees from the University of Miami Miller School of Medicine. His graduate work in Molecular Pharmacology studied the integration of signaling cascades upon an AKAP scaffold protein at the nuclear membrane. He then completed Psychiatry residency at Duke University and a clinical fellowship in Behavioral Neurology and Neuropsychiatry at Massachusetts General Hospital. He is currently an Instructor at MGH in the Department of Psychiatry, Division of Neuropsychiatry, with clinical service in Neuropsychiatry, Transcranial Magnetic Stimulation and the Acute Psychiatric Service. He is also a Research Fellow in my laboratory through the Psychiatry Department's Translational Neuroscience Training for Clinicians T32 investigating neurocircuit-based mechanisms of the lateral septum's role in motivated behavior.
Neuroscientists have developed remarkable tools for understanding brain processes. The notion that mechanisms of mental phenomena is understandable, and that psychiatric disorders can be treated more precisely, is the next frontier in medicine. I am privileged to be able to help in this endeavor.
I have been interested in the discovery process and the practical applications of my findings since undergrad. As a neuropsychiatrist, there is much more to understand about how the brain creates the mind and how these processes go awry. There is still a lot to learn about how to optimize treatment for neuropsychiatric disorders. I am grateful for medical and technological advancements. I'm looking forward to new and exciting possibilities.
Hard to know exactly. I am already straddling two careers by being a clinician and scientist. I like design and architecture, so perhaps I'd be renovating and "flipping" houses.
I see the expanded use of circuit-based noninvasive brain stimulation beyond the treatment of mood and anxiety disorders. Over time, we will hone targets and protocols for improved delivery of brain stimulation to treat a broad array of neuropsychiatric disorders.
The prospect of gaining new insights into the human condition through neuroscience research.
My first research experience working with Drosophila during my freshman year of college. It was thrilling to see how using RNA interference we could alter the neuronal morphology and behavior of fly larvae.
I believe I would enjoy life as a painter because art and science have a shared admiration of nature.
In addition to improving clinical outcomes, neuroscience will intensify debates on free will, consciousness and the soul. As the circuitry and processes underlying behavior become better understood, many will begin to reevaluate their stances on how much agency humans truly have.
Current Harvard College undergraduates doing honors thesis in Lab
Lina Ghosh (Class of 2021, Concentration in Neurobiology)
The potential for discovery and the ability to improve the lives of others through the conclusions gleaned from experimentation.
I love that the scientific community is so collaborative. When scientists make a particular discovery, the newfound knowledge gained from their experiments is disseminated through the community and serves as a building block for the discoveries of others. This pattern ensures the most success and advancement.
I would love to be a primary or secondary school teacher. I believe that childhood development hinges on early instillation of values and exposure to a diversity of stimulating experiences. I owe a lot of my character and personal development to my school teachers, who have played integral roles in my life as inspiring educators, guiding mentors, dedicated advocates, and dear friends. I could only hope to give back to others what my teachers have given me!
I think the advent of better technology will accelerate the understanding of human physiology and disease mechanisms and consequently cause treatments to be more preemptive. Greater understanding of pathology along with the availability of diverse treatments will foster a society-wide increase in both physical and psychological health awareness.
James Coleman (Class of 2021, Concentration in Stem Cell and regenerative Biology, HSCI HIP Intern 2018)
Being able to discover things that have the potential to solve health problems and improve the lives of people.
All those videos/channels on Youtube that showcase new and intriguing scientific discoveries.
I'd probably be a politician because I love to debate and would be able to make a positive impact on people's lives policy-wise.
I feel like either regenerative medicine will improve so much to where people can regrow limbs and organs, or technology will advance to where people can get fully functional robotic/prosthetic limbs. Either would raise a lot of interesting political and ethical concerns.
Alumni (and where they are now...)
Sally Levinson, B.S, Lab manager 2011-2013. (2013-Ph.D. program in Neuroscience NYU, Wenbiao Gan lab)
Melissa Boldridge, A.B, Harvard University, Undergraduate honors thesis 2014. (PhD program UC Berkeley)
Tomer Langberg, B.S, Lab Manager 2013-2015. (2015-2020 Ph.D program UC Berkeley, Neuroscience, MCB Program, Fulbright Scholar, Post doc Tel Aviv University)
Shannen Kim A.B (Class 2015, 2014 HSCI-HIP Intern, B.S. Highest Honors Neurobiology, Sept 2017 UCSF Medical School)
Duong "Izzy" Chu, B.S, Lab Manager 2015-2016. (2017 Queen's University Medical school, Ontario, Canada)
Alexia Zagouras A.B (Human Developmental and Regenerative Biology, 2015 HSCI HIP Intern, 2016 Hoopes Prize, 2017 Cleveland Clinic Lerner College of Medicine)
Kathleen McAvoy PhD (Postdoctoral Fellow, Sahay lab, 2012-2017). Scientist, Arvinas Biotech)
Tara Raam PhD (PiN Graduate student, Sahay lab, 2012-2017). 2018-Postdoctoral Fellow, Weizhe Hong lab, UCLA)
Michael Taeho Kim, B.S. (Lab Tech 2016-2018). 2018-BBS Graduate program, Harvard Medical School
Alec Reed (2016-2018, Human Developmental and Regenerative Biology, 2017 HSCI-HIP Intern, Outstanding Honors thesis Awardee) 2022 Class of Harvard Medical School.
Victor Steininger MSc (2018-2019, Harvard-Bertarelli EPFL Fellow) Entrepreneur
Haley Zanga (Lab tech 2018-2020) Research Associate Simcere Innovation)
Nannan Guo, PhD (Postdoc, Instructor, Sahay lab, 2012-2020). Tenure Track Assistant Professor, SMU, Guangzhou, China
Antoine Besnard PhD (Postdoc, Instructor, Sahay lab, 2012-2020). Permanent Position, INSERM, IGF, Montpelier, France
Samara Miller PhD (Postdoc, Sahay lab, 2018-2021). Postdoc Peyman Golshani Lab, UCLA
Min Jae Kim (Summer 2019, Fall 2019). JHU. Barry Goldwater recipient March 2021.
Hugo Vega-Ramirez M.S (2012-2018)
Charlotte Herber M.S, HSCI 2016 Summer HIP Intern, 2017 summer fellow, M.D/Ph.D program @Stanford 2018)
Christine Xu (2015) Harvard undergraduate research, HDRB.
Pakanat Decharatanachart, HSCI 2015 Summer HIP Intern (Faculty of Medicine, Chulalongkorn University
Somya Jain, Summer 2015 Intern, (Senior, Dougherty Valley High School, Class of 2016, 2016 UC Berkeley)
Wendy Feng, HSCI intern 2014, Summer fellow 2015 (Columbia University, Undergrad Research in Kellendonk lab)
Sreyan Chowdhury, B.S., HSCI intern 2012, summer fellow 2013. (Ph.D. program, Columbia University)
Craig Russo, B.S., HSCI intern 2013, summer fellow 2014, (9/2014-15, Lab tech, Woolf lab, HMS, 2016-Entrepreneur)
Paoyan Lin, Medical student, Research Intern, Sept 2012-January 2013, Summer 2013 (Karolinksa Institute Medical School)
Genelle Rankin, Research Intern, Jan-Feb 2012, 2013 (Bennington College), 2015-Lab Tech, PhD Progam PiN Harvard 2017)
Jennifer Gatchel, M.D., Ph.D., Summer 2012, MGH-McLean Psychiatry residency Program.

redpajama_set_name: RedPajamaCommonCrawl


[PMID 5577460] Haemoglobin Rampa: Alpha 95 Pro--Ser.
[PMID 1917529] Two new cases of Hb Denmark Hill [alpha 95(G2)Pro----Ala] discovered in south-west France: electrophoretical and chromatographical considerations.
[PMID 5085669] Haemoglobin Denmark Hill 95 (G2) Pro-Ala, a variant with unusual electrophoretic and oxygen-binding properties.
[PMID 9494044] Hb Godavari [alpha 95(G2)Pro-->Thr]: a neutral amino acid substitution in the alpha 1 beta 2 interface that modifies the electrophoretic mobility of hemoglobin.
This page was last edited on 18 December 2016, at 21:11.


Word travels fast, and with companies like Uber and United under fire for not putting their customers first, it's increasingly apparent how much consumers value a customer-centric organization and strategy. Consumers are quick to boycott if they believe their needs aren't a priority.
Building a good reputation is important for any company to succeed, but in order to maintain that reputation, a company has to be customer-centric at its core—not as an afterthought. And when companies succeed at putting customers first, customers are more likely to advocate for and stay with a company longer. A customer-centric company's good reputation is likely to bring in new shoppers because consumers are more willing to purchase from a company they believe will treat them well and personalize their experiences. What does it mean to be customer-centric?
A customer focus strategy is important, but customer centricity is more than that. A customer-centric company is one that enables a good customer experience before, during, and long after the sales cycle. It's one that puts the customer first, no matter what, and it's a brand that is trustworthy, empathetic, and respectful. It's something that's felt in the company's culture – in marketing, sales, management, and the customer experience.
Are your customers happy? Understanding your customers can take time, but they are a trove of valuable information—information that can be used to improve your business as well as customer satisfaction (CSAT). In order to be a customer-centric company, it's important to create a space for customers to voice their thoughts and opinion. It's even more important to listen to what your customers want or need and to support those needs. Online communities and surveys are two strategies to get to know your customers. Online communities allow your customers to not only engage with one another but also with your company. A community is a chance to show your customers you care and to optimize your help content, which in turn helps build your brand. You can get to know your customers through surveys because they are an easy way to check on your company's CSAT and better understand your customers' pain points.
2. How well do you support your customers' needs?
Once you know your customers, you can focus on better serving them and, as a result, improving your overall business. One way to better support your customers' needs is proactive customer engagement; reaching out first fosters an opportunity to create meaningful customer relationships. It's a chance to find out what matters to your customers, and how you can better focus on their top concerns or requests. Mobile chat notifications enable businesses to reach out first with personalized messages to customers on mobile devices. It's a way to greet customers, offer help before they ask, and offer more information they might not know they even need.
3. Do you empower your teams to support your customers?
Understanding and supporting your customers is key to being a customer-centric company, yet it's equally as important to empower your internal support teams. The best way to empower your team to better support customers is to equip your support agents with the right knowledge. Just as customers are great sources of insight for company improvement, so are support agents. Aside from management knowing how to lead your support team, the right tools and strategy can enable agents to provide competent and quick assistance. Zendesk Guide enables support teams to tap into their collective knowledge and to even turn solved tickets into accessible content.
Being a customer centric company is no small task, but it's worth the time and effort spent to get there. Getting to know your customers enables your company to better support their needs and improve your company's brand and reputation—and a happy customer means better marketing, more sales, and a happy bottom line.