Good Practices

Tips for Using Duo
These tips will help you use Duo effectively so that you maintain access to University applications and keep your information more secure.
Use Duo Push.
- Duo Push notification is the default and most commonly used authentication method.
- While using a phone, the Phone call authentication option is the best option for some, but we encourage you to consider using the Duo Mobile application for the most seamless login experience.
Save time and money.
- Use Remembered Devices to trust your browser for 7 days (or until browser cookies are cleared). Only remember devices you own or that are assigned to you.
- Bonus! You might also help save the University money. If you use the Phone call authentication method, depending on location, every phone call costs the University between $.02 to $2.30. Consider using the Duo Mobile app for the most seamless login experience. If you can use the Duo Push option, there is no additional charge to you or the University.
Be prepared.
- Set up at least one backup device. To make sure you're able to sign in even if your default device is unavailable, set up a backup device. Add a backup method.
- Generate bypass codes in advance. In some situations, you may not be able to use a mobile device to authenticate (for instance, you forgot your mobile device at home, or your device is broken). You can proactively generate bypass codes to use, one at a time, for a period of 1 year to make sure you can sign in anytime, anywhere.
- Manage devices after enrollment. Ensure that your account contains only your active devices.
Reactivate a device and troubleshoot Duo issues.
- If your Duo Push stopped working, you can easily reactivate your device.
- See also the Troubleshoot Duo section of Set up and use Duo.
New device?
- Follow instructions for how to add your new device in Duo.
- Read Duo's guide for managing devices for more information.
Be watchful and stay in control of your devices.
- Never approve a Duo Security push notification, call, or code that you did not initiate yourself. Inappropriate access is what Duo is designed to prevent.
- You’ll receive an email whenever a device is added to or removed from your account.
- When you add or remove a device yourself, you’ll also get a Duo push notification. Respond to this notification to confirm the change.
- If you receive a notification about a change you didn’t initiate, please contact the University abuse team at [email protected] to report the potential suspicious activity.
Update your device's operating system and apps.
- Ensure that you have the latest features and security patches by updating your device's operating system and Duo Mobile App. See your device's application store for the latest software versions.
- Note: Older operating systems that are no longer supported may not be able to upgrade to new application versions. If your phone can no longer accept Duo push, you may wish to contact Technology Help to request a Duo token.