Duo Security is required for all students, faculty, and staff at the University of Minnesota. Duo Security multi-factor authentication adds an additional layer of protection to your University of Minnesota account.
If you are enrolling in Duo for the first time, visit Enable Duo Security as a New User to get started.
We strongly recommend adding at least two different devices to your Duo Security account. By doing so, you will still be able to access your Duo account using your secondary device even if your primary Duo device is broken or inaccessible. Plan ahead by generating bypass codes and enrolling a backup device so that you can always access your University of Minnesota account.
Note: Beginning March 19, you can manage your devices through the new Duo prompt. Learn more about universal prompt at z.umn.edu/duo-device.
In this article:
Adding New Devices to Duo
Qualifying Devices
You can enroll the following types of devices:
- Smartphones and tablets (preferred)
- Landlines and other cellphones
- Hardware tokens
- Security keys
- Touch ID (only for MacOS devices, requires Google Chrome)
We are unfortunately unable to enroll international (non-US) phone numbers to complete Duo authentication via the Call me method.
If you have a smartphone tied to an international (non-US) phone number, you can still activate your device as a Tablet in order to receive Duo push notifications and generate Duo passcodes.
Add a New Duo Device
You can add a new device to your account via self-service.
To add a new Duo device:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Authenticate with Duo using your backup device or a bypass code.
- If you have a new device that uses the same phone number as an existing Duo device on your account, use the Call Me option.
- If you do not have a backup device or bypass codes AND your new device has a different phone number, prepare a valid form of photo ID and contact Technology Help for assistance.
- Select Duo Security from the navigation menu.
- Select Create or Manage Duo Account.
- Authenticate with Duo a second time using one of the options from step 2.
- Authenticate with Duo a second time using one of the options from step 2.
- Select Add another device.
- Select the type of device you wish to add.
- If you wish to enroll a smartphone tied to an international (non-US) phone number, add the device as a Tablet rather than a Mobile phone.
- Click Continue and follow the prompts to complete enrollment for your device.
- If you are adding a smart phone or a tablet, you will be prompted to scan a QR code or use an activation link to activate Duo mobile.
- Scan the QR code and click Continue to complete the enrollment process.
- If the QR code was created on the same device that you are trying to enroll, select Email me an activation link instead.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Use the device you are trying to enroll to open the emailed link.
- If you receive a prompt asking which app to use, select Duo Mobile.
- On the Activate Duo Mobile by Email screen, select Continue to complete the enrollment process.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Scan the QR code and click Continue to complete the enrollment process.
Reactivate an Existing Device
If you are replacing a phone that is already associated with your Duo Security account, activate your new device while you are in possession of both the old and new devices.
To reactivate an existing Duo device:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Authenticate with Duo using your backup device or a bypass code.
- If you have a new device that uses the same phone number as an existing Duo device on your account, use the Call Me option.
- If you do not have a backup device or bypass codes AND your new device has a different phone number, prepare a valid form of photo ID and contact Technology Help for assistance.
- Select Duo Security from the navigation menu.
- Select Create or Manage Duo Account.
- Authenticate with Duo a second time using one of the options from step 2.
- Authenticate with Duo a second time using one of the options from step 2.
- Next to the device you are reactivating or replacing, select Device Options.
- Select Reactivate Duo Mobile.
- If you are reactivating an existing phone number on your account, you will be prompted to verify ownership of the device.
- Select Call me to get your verification code.
- Enter the 6-digit code and select Verify.
- Select Continue.
- You will be prompted to install Duo Mobile on your device. Once the Duo Mobile application is installed on your device, select I have Duo Mobile Installed.
- If you are adding a smart phone or a tablet, you will be prompted to scan a QR code or use an activation link to activate Duo mobile.
- Scan the QR code and click Continue to complete the enrollment process.
- If the QR code was created on the same device that you are trying to enroll, select Email me an activation link instead.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Use the device you are trying to enroll to open the emailed link.
- If you receive a prompt asking which app to use, select Duo Mobile.
- On the Activate Duo Mobile by Email screen, select Continue to complete the enrollment process.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Scan the QR code and click Continue to complete the enrollment process.
Requesting a Hardware Token
What is a Duo Hardware Token?
Duo hardware tokens are small fobs that generate Duo authentication passcodes. Each hardware token is tied to one user and generates passcodes that can ONLY be used by that user.
More information about Using Duo With a Hardware Token is available in the Duo Guide to Two-Factor Authentication.
Hardware Token FAQs
Who should get a Duo hardware token?
We recommend requesting a Duo hardware token only if you have a business need or if you cannot use Duo on other devices.
If possible, enroll a smartphone or tablet instead.
How much does a Duo hardware token cost?
Hardware tokens are available free of charge for use with your University of Minnesota account.
What if my Duo hardware token stops working?
If your token breaks, you may exchange it for a new token at a Technology Help walk-in location.
How do I get a Duo hardware token?
To request a Duo hardware token:
- Prepare a valid form of photo ID.
- Visit a Technology Help walk-in location or contact Technology Help by phone or video web conference.
International Requests
Rather than using a hardware token, we recommend that international students purchase a Security Key or use another authentication option.
For more information, refer to Duo: Use Duo Internationally.
To request a Duo hardware token from outside of the United States:
- Contact your departmental supervisor for their approval.
- Your department will be responsible for mailing the hardware token to you internationally and any associated shipping costs.
- Technology Help is not able to ship Duo hardware tokens internationally.
- After receiving your supervisor's approval, prepare a valid form of photo ID and contact Technology Help.
- Once your request has been processed, the token will be sent to your departmental supervisor. Your department can then mail the hardware token to you.
Removing Devices From Duo
You may need to remove a device from your Duo Security account for many different reasons. You may need to remove a device that:
- has been replaced and is no longer in use
- was added mistakenly
- was lost or stolen
Removing devices from your Duo account will not remove the requirement to use Duo Security multi-factor authentication to log into your University of Minnesota account.
Lost or Stolen Duo Devices
If you found a lost Duo hardware token, return the token you found to Technology Help.
Remove LOST or STOLEN devices from your own University of Minnesota Duo Security account IMMEDIATELY.
Prepare a valid form of photo ID and contact Technology Help if you need assistance removing a device.
If the lost or stolen device is University-managed, report it to Technology Help as soon as possible.
Remove a Duo Device
You can remove a device from Duo either using a backup Duo device or bypass codes or after adding a new device to your account.
To remove an existing Duo device:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Authenticate with Duo using an existing device or with a bypass code.
- If you do not have an existing device or bypass codes, prepare a valid form of photo ID and contact Technology Help for assistance.
- Select Duo Security from the navigation menu.
- Select Create or Manage Duo Account.
- Authenticate with Duo a second time using one of the options from step 2.
- Authenticate with Duo a second time using one of the options from step 2.
- Select Device Options for the device you want to remove.
- Click the trash can icon.
- Click Remove.
Return a Duo Hardware Token
Return a Duo token if:
- It is your own Duo hardware token and it is no longer in use or broken.
- You found a Duo hardware token that is not your own.
There are two different ways to return a token.
Drop Off a Token at a Walk-in Location
Visit a walk-in location to return a token in person.
Technology Help staff will help unlink the token from any account it is currently linked to.
Our staff will also handle token disposal.
Mail a Duo Hardware Token
You can return Duo hardware tokens by mail.
Include a note with the following information:
- If returning your own token, include:
- your full name
- your Internet ID
- if the token is defective/broken or not
- if you are staff leaving the University
- If returning a lost token, include a short memo that this is a found token
Mail the token and note to the following address.
U.S. Mailing Address:
University of Minnesota
OIT Technology Help
2218 University Ave SE
Minneapolis, MN 55414
Campus Mail:
OIT Technology Help
2218 University Ave SE
2171A (Campus Delivery Code)