General Multi-Factor information and a list of protected services can be found here.
...
This extra step prevents a bad actor from accessing your Whitman account – even if they have your password. This verification is sent only after you successfully enter your password – so you are aware when you should expect the verification step.
How often will I see this extra step?
Most people will be asked to verify once per day for MyWhitman access.
Some people who access high-risk systems will need to verify each time they access those systems.
You will not be asked to verify access every time you check your email. Access to Gmail and other Google services request verification the first time you access from a new device and only periodically (weeks) on devices you use regularly.
Is it safe to install the Duo Mobile app?
The Duo Mobile app is a secure app designed to protect your privacy.
Your protected data and your passwords are never transmitted to the Duo two-factor system; only your username is transmitted to facilitate the two-factor authentication process.
Duo Mobile has no more access or visibility into your phone than any other app. Duo Mobile cannot:
...
If your previous device was configured for an iCloud or direct Google Play backup, the Duo app on your new phone may offer to restore your setup. If not, you simply need to add your new phone as an additional device.
To add your new device - start by connecting to a Whitman MFA service - for example: <https://my.whitman.edu> enter your Whitman username and password to login
...