Duo Security is required for all students, faculty, and staff at the University of Minnesota. Duo Security multi-factor authentication adds an additional layer of protection to your University of Minnesota account.
If you are enrolling in Duo for the first time, visit Enable Duo Security as a New User to get started.
We strongly recommend adding at least two different devices to your Duo Security account. By doing so, you will still be able to access your Duo account using your secondary device even if your primary Duo device is broken or inaccessible. Plan ahead by generating bypass codes and enrolling a backup device so that you can always access your University of Minnesota account.
In this article:
Adding New Devices to Duo
Qualifying Devices
You can enroll the following types of devices:
- Smartphones and tablets (preferred)
- Landlines and other cellphones
- Hardware tokens
- Security keys
- Touch ID (only for MacOS devices, requires Google Chrome)
We are unfortunately unable to enroll international (non-US) phone numbers to complete Duo authentication via the Call me method.
If you have a smartphone tied to an international (non-US) phone number, you can still activate your device as a Tablet in order to receive Duo push notifications and generate Duo passcodes.
Add a New Duo Device
You can add a new device to your account via self-service.
To add a new Duo device:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Authenticate with Duo using your backup device or a bypass code.
- If you have a new device that uses the same phone number as an existing Duo device on your account, use the Call Me option.
- If you do not have a backup device or bypass codes AND your new device has a different phone number, prepare a valid form of photo ID and contact Technology Help for assistance.
- Select Duo Security from the navigation menu.
- Select Create or Manage Duo Account.
- Authenticate with Duo a second time using one of the options from step 2.
- Authenticate with Duo a second time using one of the options from step 2.
- Select Add another device.
- Select the type of device you wish to add.
- If you wish to enroll a smartphone tied to an international (non-US) phone number, add the device as a Tablet rather than a Mobile phone.
- Click Continue and follow the prompts to complete enrollment for your device.
- If you are adding a smart phone or a tablet, you will be prompted to scan a QR code or use an activation link to activate Duo mobile.
- Scan the QR code and click Continue to complete the enrollment process.
- If the QR code was created on the same device that you are trying to enroll, select Email me an activation link instead.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Use the device you are trying to enroll to open the emailed link.
- If you receive a prompt asking which app to use, select Duo Mobile.
- On the Activate Duo Mobile by Email screen, select Continue to complete the enrollment process.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Scan the QR code and click Continue to complete the enrollment process.
Reactivate an Existing Device
If you are replacing a phone that is already associated with your Duo Security account, activate your new device while you are in possession of both the old and new devices.
To reactivate an existing Duo device:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Authenticate with Duo using your backup device or a bypass code.
- If you have a new device that uses the same phone number as an existing Duo device on your account, use the Call Me option.
- If you do not have a backup device or bypass codes AND your new device has a different phone number, prepare a valid form of photo ID and contact Technology Help for assistance.
- Select Duo Security from the navigation menu.
- Select Create or Manage Duo Account.
- Authenticate with Duo a second time using one of the options from step 2.
- Authenticate with Duo a second time using one of the options from step 2.
- Next to the device you are reactivating or replacing, select Device Options.
- Select Reactivate Duo Mobile.
- If you are reactivating an existing phone number on your account, you will be prompted to verify ownership of the device.
- Select Call me to get your verification code.
- Enter the 6-digit code and select Verify.
- Select Continue.
- You will be prompted to install Duo Mobile on your device. Once the Duo Mobile application is installed on your device, select I have Duo Mobile Installed.
- If you are adding a smart phone or a tablet, you will be prompted to scan a QR code or use an activation link to activate Duo mobile.
- Scan the QR code and click Continue to complete the enrollment process.
- If the QR code was created on the same device that you are trying to enroll, select Email me an activation link instead.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Use the device you are trying to enroll to open the emailed link.
- If you receive a prompt asking which app to use, select Duo Mobile.
- On the Activate Duo Mobile by Email screen, select Continue to complete the enrollment process.
- Enter an email address that you can check on the device you wish to enroll. Click Send email.
- Scan the QR code and click Continue to complete the enrollment process.
Requesting a Hardware Token
What is a Duo Hardware Token?
Duo hardware tokens are small fobs that generate Duo authentication passcodes. Each hardware token is tied to one user and generates passcodes that can ONLY be used by that user.
More information about Using Duo With a Hardware Token is available in the Duo Guide to Two-Factor Authentication.
Hardware Token FAQs
Who should get a Duo hardware token?
We recommend requesting a Duo hardware token only if you have a business need or if you cannot use Duo on other devices.
If possible, enroll a smartphone or tablet instead.
How much does a Duo hardware token cost?
Hardware tokens are available free of charge for use with your University of Minnesota account.
What if my Duo hardware token stops working?
If your token breaks, you may exchange it for a new token at a Technology Help walk-in location.
How do I get a Duo hardware token?
To request a Duo hardware token:
- Prepare a valid form of photo ID.
- Contact Technology Help either by phone, via video web conference, or at a walk-in location.
International Requests
Rather than using a hardware token, we recommend that international students purchase a Security Key or use another authentication option.
For more information, refer to Duo: Use Duo Internationally.
To request a Duo hardware token from outside of the United States:
- Contact your departmental supervisor for their approval.
- Your department will be responsible for mailing the hardware token to you internationally and any associated shipping costs.
- Technology Help is not able to ship Duo hardware tokens internationally.
- After receiving your supervisor's approval, prepare a valid form of photo ID and contact Technology Help.
- Once your request has been processed, the token will be sent to your departmental supervisor. Your department can then mail the hardware token to you.
Removing Devices From Duo
You may need to remove a device from your Duo Security account for many different reasons. You may need to remove a device that:
- has been replaced and is no longer in use
- was added mistakenly
- was lost or stolen
Removing devices from your Duo account will not remove the requirement to use Duo Security multi-factor authentication to log into your University of Minnesota account.
Lost or Stolen Duo Devices
Remove LOST or STOLEN devices from your University of Minnesota Duo Security account IMMEDIATELY.
Prepare a valid form of photo ID and contact Technology Help if you need assistance removing a device.
If the lost or stolen device is University-managed, report it to Technology Help as soon as possible.
Remove a Duo Device
You can remove a device from Duo either using a backup Duo device or bypass codes or after adding a new device to your account.
To remove an existing Duo device:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Authenticate with Duo using an existing device or with a bypass code.
- If you do not have an existing device or bypass codes, prepare a valid form of photo ID and contact Technology Help for assistance.
- Select Duo Security from the navigation menu.
- Select Create or Manage Duo Account.
- Authenticate with Duo a second time using one of the options from step 2.
- Authenticate with Duo a second time using one of the options from step 2.
- Select Device Options for the device you want to remove.
- Click the trash can icon.
- Click Remove.
Return Your Hardware Token
Return your Duo hardware token if it is broken or if you no longer use it. There are two different ways to return your token.
Drop Off Your Token at a Walk-in Location
Visit a walk-in location to return the token in person.
Technology Help staff will help unlink the token from your account. Our staff will also handle token disposal.
Mail Your Hardware Token
You can return your hardware token by mail.
Include a note with the following information:
- your full name
- your Internet ID
- if the token is defective/broken or not
- if you are staff leaving the University
Mail the token and note to the following address.
Attention: Information Technology
B-2 Coffman Memorial Union
300 Washington Avenue SE
Minneapolis, MN 55455