Duo: Add or Remove Devices

Duo Security is required for all students, faculty, and staff at the University of Minnesota. Duo Security multi-factor authentication adds an additional layer of protection to your University of Minnesota account.

If you are enrolling in Duo for the first time, visit Enable Duo Security as a New User to get started.

We strongly recommend adding at least two different devices to your Duo Security account. By doing so, you will still be able to access your Duo account using your secondary device even if your primary Duo device is broken or inaccessible. Plan ahead by generating bypass codes and enrolling a backup device so that you can always access your University of Minnesota account.

In this article: 

Adding New Devices to Duo

Qualifying Devices

You can enroll the following types of devices:

  • Smartphones and tablets (preferred)
  • Landlines and other cellphones
  • Hardware tokens
  • Security keys
  • Touch ID (only for MacOS devices, requires Google Chrome)

We are unfortunately unable to enroll international (non-US) phone numbers to complete Duo authentication via the Call me method.
If you have a smartphone tied to an international (non-US) phone number, you can still activate your device as a Tablet in order to receive Duo push notifications and generate Duo passcodes.

Add a New Duo Device

You can add a new device to your account via self-service. 

To add a new Duo device:

  1. Sign into my-account.umn.edu with your UMN Internet ID and password.
  2. Authenticate with Duo using your backup device or a bypass code.
    1. If you have a new device that uses the same phone number as an existing Duo device on your account, use the Call Me option.
    2. If you do not have a backup device or bypass codes AND your new device has a different phone number, prepare a valid form of photo ID and contact Technology Help for assistance.
  3. Select Duo Security from the navigation menu. 
    My Account, User details page for an example user. The side menu lists options for Password Management, Duo Security (highlighted), Google, and Additional Accounts.
  4. Select Create or Manage Duo Account.
    My Account, Duo Security menu. Options include Duo Details, Create or Manage Duo Account (highlighted), Generate Duo Bypass Codes, and Enable Duo Security.
    1. Authenticate with Duo a second time using one of the options from step 2.
      My Account, Duo Security, Create or Manage Duo Account, Duo authentication prompt. "Choose an authentication method". There are 3 buttons for "Call Me", "Enter a Passcode", and "Send Me a Push".
  5. Select Add another device.
    Duo My Settings & Devices Menu: Add another device link highlighted.
  6. Select the type of device you wish to add.
    Duo My Settings & Devices Menu: What type of device are you adding? Menu options include Mobile phone (recommended), tablet, landline, security key, and Touch ID (greyed out with a note that it "requires Chrome on MacOS to use touch ID"). There is a Back button and a Continue button (highlighted) below the list of options.
    • If you wish to enroll a smartphone tied to an international (non-US) phone number, add the device as a Tablet rather than a Mobile phone.
  7. Click Continue and follow the prompts to complete enrollment for your device.
  8. If you are adding a smart phone or a tablet, you will be prompted to scan a QR code or use an activation link to activate Duo mobile.
    1. Scan the QR code and click Continue to complete the enrollment process.
      Duo My Settings & Devices Menu: Activate Duo Mobile for iOS. A QR code is pictured (highlighted) with a note to "Scan the QR code". Below the QR code, there are two buttons to go "Back" or "Continue" (highlighted).
    2. If the QR code was created on the same device that you are trying to enroll, select Email me an activation link instead.
      Activate Duo Mobile Menu; "Email me an activation link instead" link highlighted.
      1. Enter an email address that you can check on the device you wish to enroll. Click Send email. 
        Activate Duo Mobile Menu, Activate Duo Mobile by Email. "1. Enter an email address that you can check on your iOS device. We'll send you a special link that you can click to activate Duo Mobile. 2. Once you've clicked the link, click Continue below." There is a field to enter an email address and a button to Send Email (highlighted), as well as a button to go Back and to Continue (highlighted).
      2. Use the device you are trying to enroll to open the emailed link.
        • If you receive a prompt asking which app to use, select Duo Mobile. 
      3. On the Activate Duo Mobile by Email screen, select Continue to complete the enrollment process.

Reactivate an Existing Device

If you are replacing a phone that is already associated with your Duo Security account, activate your new device while you are in possession of both the old and new devices. 

To reactivate an existing Duo device:

  1. Sign into my-account.umn.edu with your UMN Internet ID and password.
  2. Authenticate with Duo using your backup device or a bypass code.
    1. If you have a new device that uses the same phone number as an existing Duo device on your account, use the Call Me option.
    2. If you do not have a backup device or bypass codes AND your new device has a different phone number, prepare a valid form of photo ID and contact Technology Help for assistance.
  3. Select Duo Security from the navigation menu.
    My Account, User details page for an example user. The side menu lists options for Password Management, Duo Security (highlighted), Google, and Additional Accounts.
  4. Select Create or Manage Duo Account.
    My Account, Duo Security menu. Options include Duo Details, Create or Manage Duo Account (highlighted), Generate Duo Bypass Codes, and Enable Duo Security.
    1. Authenticate with Duo a second time using one of the options from step 2.
      My Account, Duo Security, Create or Manage Duo Account, Duo authentication prompt. "Choose an authentication method". There are 3 buttons for "Call Me", "Enter a Passcode", and "Send Me a Push".
  5. Next to the device you are reactivating or replacing, select Device Options.
    Duo settings menu, My Settings & Devices, example iPhone Device Options (highlighted)
  6. Select Reactivate Duo Mobile. 
    Duo settings menu, My Settings & Devices, example iPhone selected. Reactivate Duo Mobile (highlighted).
  7. If you are reactivating an existing phone number on your account, you will be prompted to verify ownership of the device.
    Duo Settings Menu, Reactivate Mobile Phone, Verify Ownership of 612-123-4567. "1. We can call you with a verification code", Call me button (highlighted). "2. Enter your 6-digit code:", Verify button (highlighted). Back and Continue (highlighted) buttons are at the bottom of the screen.
    1. Select Call me to get your verification code. 
    2. Enter the 6-digit code and select Verify. 
    3. Select Continue. 
  8. You will be prompted to install Duo Mobile on your device. Once the Duo Mobile application is installed on your device, select I have Duo Mobile Installed.
  9. If you are adding a smart phone or a tablet, you will be prompted to scan a QR code or use an activation link to activate Duo mobile.
    1. Scan the QR code and click Continue to complete the enrollment process.
      Duo My Settings & Devices Menu: Activate Duo Mobile for iOS. A QR code is pictured (highlighted) with a note to "Scan the QR code". Below the QR code, there are two buttons to go "Back" or "Continue" (highlighted).
    2. If the QR code was created on the same device that you are trying to enroll, select Email me an activation link instead.
      Activate Duo Mobile Menu; "Email me an activation link instead" link highlighted.
      1. Enter an email address that you can check on the device you wish to enroll. Click Send email. 
        Activate Duo Mobile Menu, Activate Duo Mobile by Email. "1. Enter an email address that you can check on your iOS device. We'll send you a special link that you can click to activate Duo Mobile. 2. Once you've clicked the link, click Continue below." There is a field to enter an email address and a button to Send Email (highlighted), as well as a button to go Back and to Continue (highlighted).
      2. Use the device you are trying to enroll to open the emailed link.
        • If you receive a prompt asking which app to use, select Duo Mobile. 
      3. On the Activate Duo Mobile by Email screen, select Continue to complete the enrollment process.

Requesting a Hardware Token

What is a Duo Hardware Token?

Duo hardware tokens are small fobs that generate Duo authentication passcodes. Each hardware token is tied to one user and generates passcodes that can ONLY be used by that user. 

Duo hardware token. It is an oblong black and white fob with a red power symbol on the left side and a loop for a keyring on the right side. A small screen displays a 6 digit number.

More information about Using Duo With a Hardware Token is available in the Duo Guide to Two-Factor Authentication.

Hardware Token FAQs

Who should get a Duo hardware token?

We recommend requesting a Duo hardware token only if you have a business need or if you cannot use Duo on other devices. 

If possible, enroll a smartphone or tablet instead. 

How much does a Duo hardware token cost?

Hardware tokens are available free of charge for use with your University of Minnesota account.

What if my Duo hardware token stops working? 

If your token breaks, you may exchange it for a new token at a Technology Help walk-in location. 

How do I get a Duo hardware token? 

To request a Duo hardware token:

  1. Prepare a valid form of photo ID.
  2. Contact Technology Help either by phone, via video web conference, or at a walk-in location.

International Requests

Rather than using a hardware token, we recommend that international students purchase a Security Key or use another authentication option. 

For more information, refer to Duo: Use Duo Internationally. 

To request a Duo hardware token from outside of the United States:

  1. Contact your departmental supervisor for their approval.
    • Your department will be responsible for mailing the hardware token to you internationally and any associated shipping costs. 
    • Technology Help is not able to ship Duo hardware tokens internationally.
  2. After receiving your supervisor's approval, prepare a valid form of photo ID and contact Technology Help.
  3. Once your request has been processed, the token will be sent to your departmental supervisor. Your department can then mail the hardware token to you. 

Removing Devices From Duo

You may need to remove a device from your Duo Security account for many different reasons. You may need to remove a device that:

  • has been replaced and is no longer in use
  • was added mistakenly
  • was lost or stolen

Removing devices from your Duo account will not remove the requirement to use Duo Security multi-factor authentication to log into your University of Minnesota account.

Lost or Stolen Duo Devices

Remove LOST or STOLEN devices from your University of Minnesota Duo Security account IMMEDIATELY. 

Prepare a valid form of photo ID and contact Technology Help if you need assistance removing a device.

If the lost or stolen device is University-managed, report it to Technology Help as soon as possible.

Remove a Duo Device

You can remove a device from Duo either using a backup Duo device or bypass codes or after adding a new device to your account.

To remove an existing Duo device:

  1. Sign into my-account.umn.edu with your UMN Internet ID and password.
  2. Authenticate with Duo using an existing device or with a bypass code.
    1. If you do not have an existing device or bypass codes, prepare a valid form of photo ID and contact Technology Help for assistance.
  3. Select Duo Security from the navigation menu.
    My Account, User details page for an example user. The side menu lists options for Password Management, Duo Security (highlighted), Google, and Additional Accounts.
  4. Select Create or Manage Duo Account.
    My Account, Duo Security menu. Options include Duo Details, Create or Manage Duo Account (highlighted), Generate Duo Bypass Codes, and Enable Duo Security.
    1. Authenticate with Duo a second time using one of the options from step 2.
      My Account, Duo Security, Create or Manage Duo Account, Duo authentication prompt. "Choose an authentication method". There are 3 buttons for "Call Me", "Enter a Passcode", and "Send Me a Push".
  5. Select Device Options for the device you want to remove.
    Duo settings menu, My Settings & Devices, example iPhone Device Options (highlighted)
  6. Click the trash can icon.
    Create or Manage Duo Account, My Settings & Devices. Device options are open for an example iPhone, which presents three buttons to Reactivate Duo Mobile, Change Device Name, or a trashcan icon to remove the device (highlighted).
  7. Click Remove. 
    My Settings & Devices. "Are you sure you want to remove this device? This action cannot be undone." There is a button to Cancel and a button to Remove (highlighted).

Return Your Hardware Token

Return your Duo hardware token if it is broken or if you no longer use it. There are two different ways to return your token.

Drop Off Your Token at a Walk-in Location

Visit a walk-in location to return the token in person. 

Technology Help staff will help unlink the token from your account. Our staff will also handle token disposal.

Mail Your Hardware Token

You can return your hardware token by mail.

Include a note with the following information:

  • your full name
  • your Internet ID
  • if the token is defective/broken or not
  • if you are staff leaving the University

Mail the token and note to the following address. 

Attention: Information Technology
B-2 Coffman Memorial Union
300 Washington Avenue SE
Minneapolis, MN 55455

Last modified

TDX ID

3996