Duo: Use Duo Security in China
China (Mainland/People’s Republic of China) has implemented technologies to regulate the Internet domestically. These regulations impact users’ ability to enroll in and use Duo Security in China.
In this article:
- Summary of regulations and limitations
- Best practices for using Duo in China (on any device)
- Recommendations for iOS devices in China
- Recommendations for Android devices in China
Summary of regulations and limitations
- China blocks the Android Google Play Store, which is the platform for installing Duo Mobile on an Android device. See Does Duo Mobile work in China? for more details.
- China blocks Android’s Google Play Services, which prevents the Duo Push feature from working properly. Users can utilize the Android “Fetch” feature or use a Duo Mobile Passcode as a workaround. See Does Duo Mobile work in China? for more details.
- China blocks Duo’s Phone Callback feature. Beginning in March 2019, China put regulations into place that affect Duo’s phone callback authentication deliverability to numbers with a Chinese country code (+86). Due to these regulations, phone call authentication is currently an unreliable authentication method to use for Duo users with +86 phone numbers. See Why might Duo phone callback authentication fail to Chinese +86 numbers? for more details.
- China blocks SMS messages containing links.
Best practices for using Duo in China (on any device)
Due to the aforementioned limitations, there are a few best practices for traveling to China and using Duo.
Short trips to China: bypass codes
It is recommended that users generate bypass codes and keep them on their person in China. See Generate and Use Bypass Codes for instructions.
Extended stays in China: hardware tokens
The University recommends that users who live in China for long periods of time get a hardware token from their local Technology Help location before traveling to China. The University is generally unable to mail tokens to China. See Hardware and Security Key Tokens for additional instructions.
Recommendations for iOS devices in China
There are no known issues with enrolling or the day-to-day use of Duo Mobile with iOS Devices in China. However, a VPN connection may be required in order to complete enrollment with a QR code.
Note: enrolling an iOS device as a cell phone (non-smart phone) will not work with a phone number with a Chinese Country Code (+86)
Recommendations for Android devices in China
Enroll Android devices in China
Recommended: Duo Mobile
Users are able to download the latest version of the Duo Mobile application directly to their Android device by following the steps in this Duo KB article.
Note: Users may require a VPN connection in order to download Duo Mobile, or in order to complete their enrollment with a QR code.
It is not recommended to enroll an Android device as a cell phone (non-smart phone); this will not work with a phone number with a Chinese Country Code (+86).
Use Duo Mobile from Android devices in China
Recommended: Use Duo Mobile passcodes. This will work in all locations, even without Internet connectivity.
Note: It is possible, but not recommended, to use Duo Mobile Push. In order to use Duo Mobile Push, users must manually fetch the Duo push from their Android services menu.
Assistance accessing Duo from China
- If a user is unable to access their account as a result of the limitations on Duo in China, Technology help (1.612.301.4357) is open 24 hours a day and can provide a temporary bypass code. This will enable them to generate bypass codes (see above).
- Users will be required to establish a video chat connection (via WebEx or Skype) and complete an identity verification process in order to receive a bypass code.