Duo Security is required for all students, faculty, and staff at the University of Minnesota. Duo Security multi-factor authentication adds an additional layer of protection to your University of Minnesota account.
It is strongly recommended that you add at least two additional devices to your Duo Security account. This will allow you to access your Duo account via your additional devices in the event that your primary Duo device is broken or inaccessible.
In this article:
- Adding New Devices to Duo
- Requesting a Hardware Token
- Removing Devices From Duo
- Accessing Duo via Qualifying Devices and Methods
- Additional Resources
Adding New Devices to Duo
Qualifying Devices
You can enroll the following types of devices:
- Smartphones and tablets (preferred)
- Landlines and other cellphones
- Hardware tokens
- Security keys
- Touch ID (only for MacOS devices, requires Google Chrome)
- Face ID/Touch ID on iPhone or iPad
- Bypass Codes
You can find more specifics about each of these devices in the Accessing Duo via Qualifying Devices and Methods below.
We are unfortunately unable to enroll international (non-US) phone numbers to complete Duo authentication via the Phone call method.
If you have a smartphone tied to an international (non-US) phone number, you can still activate your device as a Tablet in order to receive Duo push notifications and generate Duo passcodes.
Add a New Duo Device
- Visit any UMN website that requires sign in, such as my-account.umn.edu.
- Enter your your UMN internet ID and password, then click Sign In.
- Select Other options.
- Select Manage devices.
- When prompted to Verify your identity before managing devices, select an option to authenticate.
- To enter one of your backup Duo Bypass codes generated via self-service OR a Bypass code provided by Technology Help staff, select the Bypass code option.
- To enter one of your backup Duo Bypass codes generated via self-service OR a Bypass code provided by Technology Help staff, select the Bypass code option.
- Select Add a device.
- Select an option depending on what type of device you would like to add to Duo.
- Select Duo Mobile to configure a smartphone or tablet with Duo.
- Select Security key to set up a security key.
- Select Phone number to set up a landline telephone or cellphone to get Duo phone calls.
- Follow the remaining prompts and enter the information requested to finish setting up your Duo device.
Reactivate an Existing Device
If you are replacing a device that is already associated with your Duo Security account, activate your new device while you still are in possession of both the old and new devices.
If you have recently acquired a new phone but are still using the same phone number, you can reactivate Duo Mobile on your new device.
Refer to Duo's guide for Reactivating Duo Mobile for an Existing Device for step-by-step instructions.
If you need assistance reactivating an existing Duo device, contact Technology Help.
Requesting a Hardware Token
What is a Duo Hardware Token?
Duo hardware tokens are small fobs that generate Duo authentication passcodes. Each hardware token is tied to one user and generates passcodes that can ONLY be used by that user.
More information about Using Duo With a Hardware Token is available in the Duo Guide to Two-Factor Authentication.
Hardware Token FAQs
Who should get a Duo hardware token?
We recommend requesting a Duo hardware token only if you have a business need or if you cannot use Duo on other devices.
If possible, enroll a smartphone or tablet instead.
How much does a Duo hardware token cost?
Hardware tokens are available free of charge for use with your University of Minnesota account.
What if my Duo hardware token stops working?
If your token breaks, request a new token and dispose of your broken one.
How do I get a Duo hardware token?
To request a Duo hardware token:
- Prepare a valid form of photo ID.
- Visit a Technology Help walk-in location or contact Technology Help by phone or video web conference.
International Requests
Rather than using a hardware token, we recommend that international students purchase a Security Key or use another authentication option.
For more information, refer to Duo: Use Duo Internationally.
To request a Duo hardware token from outside of the United States:
- Contact your departmental supervisor for their approval.
- Your department will be responsible for mailing the hardware token to you internationally and any associated shipping costs.
- Technology Help is not able to ship Duo hardware tokens internationally.
- After receiving your supervisor's approval, prepare a valid form of photo ID and contact Technology Help.
- Once your request has been processed, the token will be sent to your departmental supervisor. Your department can then mail the hardware token to you.
Removing Devices From Duo
You may need to remove a device from your Duo Security account for many different reasons. You may need to remove a device that:
- has been replaced and is no longer in use
- was added mistakenly
- was lost or stolen
Removing devices from your Duo account will not remove the requirement to use Duo Security multi-factor authentication to log into your University of Minnesota account.
Lost or Stolen Duo Devices
Remove LOST or STOLEN devices from your own University of Minnesota Duo Security account IMMEDIATELY.
Prepare a valid form of photo ID and contact Technology Help if you need assistance removing a device.
If the lost or stolen device is University-managed, report it to Technology Help as soon as possible.
Remove a Duo Device
- Visit any UMN website that requires sign in, such as my-account.umn.edu.
Enter your UMN internet ID and password, then click Sign In.
- Select Other options.
- Select Manage devices.
- When prompted to Verify your identity before managing devices, select an option to authenticate.
- After you verify your identity, the Duo device management page will open. Locate the device you wish to remove.
- In the upper-right corner of the tile for the device you wish to delete, select Edit, then Delete.
Dispose of a Duo Hardware Token
If you no longer use your Duo hardware token, if it is broken, or if you find a Duo token that is not your own, please recycle it responsibly. Learn about the University's Computer and Device Recycling and Donation options.
Accessing Duo via Specific Devices and Methods
Reminder: we strongly recommend adding at least two different devices to your Duo Security account. By doing so, you will still be able to access your Duo account using your secondary device even if your primary Duo device is broken or inaccessible.
Smartphones and Tablets
We recommend enrolling your smartphone or tablet as your primary Duo device.
- The Duo Security mobile application is available for smartphones and tablets in both the Google Play store and the Apple App Store.
- Visit Duo Security's website for more information about Duo Mobile on Android and Duo Mobile on iOS.
The Duo Mobile application offers a variety of different ways to authenticate your identity when signing into University websites and services.
- You can use Duo Push notifications, enter a Passcode, or use the Call Me option with smartphones tied to a US phone number.
- You can receive Duo Push notifications and generate passcodes on your tablet or smartphones tied to an international phone number.
Landlines and Other Cellphones
We recommend enrolling a backup phone number (such as your home phone or office telephone) in case you are unable to access your primary Duo device.
You can enroll a landline or cellphone with a US phone number in Duo Security for use with the Phone call authentication method.
Touch ID
Touch ID with Duo is currently only available on the Chrome browser for MacBook Pro or MacBook Air devices with a Touch ID button.
You must use a non-private Chrome browsing window for Touch ID enrollment or authentication. If you have more than one MacBook that you'd like to use to approve Duo login requests using Touch ID, you must enroll each of them separately as a new Touch ID device.
Face ID/Touch ID on iPhone or iPad
In order to use Face ID or Touch ID on an iPhone or iPad with Duo, make sure you have the following:
- An iPhone or iPad that supports Face ID or Touch ID.
- Face ID or Touch ID already set up on the iPhone or iPad. Learn how to set up Face ID or set up Touch ID at the Apple Support site.
- iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.
Hardware Tokens
Duo hardware tokens are small fobs that generate Duo authentication passcodes. Each hardware token is tied to one user and generates passcodes that can ONLY be used by that user.
We recommend requesting a Duo hardware token only if you have a business need or if you cannot use Duo on other devices.
Bypass Codes
You can generate 10 single-use bypass codes at a time for future use in situations where you may not be able to use your usual Duo authentication method.
These codes are valid for a period of 1 year (365 days) after they are generated. Any time you generate new bypass codes, your previously-generated bypass codes will become void.
Security Codes
Security Keys are tokens that generate passcodes for Duo access. You must purchase your own Security Key to use this method of authentication.
Security Keys are recommended for international students and those who may have trouble authenticating with other methods.