Set up your UBbox Restricted Data Account

Once UBIT approves and provisions your UBbox Restricted Data account,  you'll need to change the account's default password, configure Duo two-step verification, and share the restricted folder with your standard UBbox account.

Collect your account information

You will be sent an email with the new account credentials and other information. 

  • USERNAME for your UBbox Restricted Data Account - Use this to complete the instructions on this page (the password is sent separately as an added security measure)
  • Folder name for your UBbox Restricted Data Account - Starts with "SENSITIVE"
  • Email forward from your UBbox Restricted Data account - This is where you will receive notifications from UBbox

Step 1: Change the default password

  1. Log on to a Windows machine using your personal UBITName and password
  2. Press Ctrl-Alt-Delete and select Change a Password
  3. Change the username to:
    • usda.USERNAME@itorg.ad.buffalo.edu” (where USERNAME is the username you were assigned for your UBbox Restricted Data Account)
      or
    • usha.USERNAME@itorg.ad.buffalo.edu (where USERNAME is the username you were assigned for your UBbox HIPAA Data Account)
  4. Enter the new password in both the new password and confirm password fields

Step 2: Register the account with Duo

  1. Open a Private Browsing (Incognito) window and go to
  2. Login with the username usda.USERNAME@itorg.ad.buffalo.edu (or usha.USERNAME@itorg.ad.buffalo.edu for HIPAA) and the password you set
  3. Enroll a device. This can be the same device you use with your UBITName

Step 3: Share the SENSITIVE folder with your UBITName in UBbox

  1. Open a Private Browsing (Incognito) window and go to
  2. Log into UBbox with the username usda.USERNAME@itorg.ad.buffalo.edu (or usha.USERNAME@itorg.ad.buffalo.edu for HIPAA) and the password you set
  3. Click the share icon on the SENSITIVE FOLDER folder
  4. Add your UBITName and change Invite as Editor to Invite as Co-owner

Note: Do not invite others to the folder until monitoring has been set up.

UBbox notifications

Notifications from the UBbox Restricted Account will be sent to the requester's UBmail address. These include UBbox folder collaboration activity, and Box detection of malicious content uploaded to the space. Some data custodians elect to enable additional notifications such as being notified when items are deleted so they can ensure items are not deleted incorrectly.

Additional Help

If you require help with any of the above steps, please contact your departmental IT support for assistance .