Duo: Enable Duo Security as a New User
Anyone with a UMN Internet ID can use Duo Security multi-factor authentication for all University sign-in pages. Duo Security is required for all students, faculty, and staff.
- Note: Guest and departmental accounts can opt-in to Duo Security. If you have a guest or departmental account and choose not to enroll, you will need to update your password every year.
Duo Security adds an additional layer of protection to applications that use your University Internet ID for authentication. Learn more information at the Duo Security Technology Page.
After reviewing your device options, go to Duo: Add or Remove Devices to add your devices to Duo.
- Note: While it is possible to remove a device from your Duo device options, it is not possible to remove your account from Duo after opting in.
In this article:
- Sign into my-account.umn.edu with your UMN Internet ID and password.
- Select Duo Security from the navigation menu on the left-hand side of the page.
- In the drop-down menu, choose Enable Duo Security
- Select Yes to opt in, then select Submit.
We strongly recommend adding at least two devices to your Duo account in case you cannot access your primary device for any reason. Plan ahead by generating bypass codes and enrolling a backup device so that you can always get into your account. Learn more information about adding devices to your Duo account.
Smartphones and tablets are the most common devices to use with Duo and offer a variety of ways to authenticate. You can use Duo Push, Passcode or Call Me with any smartphone, tablet, or Apple Watch to verify your identity when signing into University pages.
You can use Duo Push with any smartphone, including international devices.
Android: Learn more information about Duo Mobile on Android on Duo's Website.
iOS: Learn more information about Duo Mobile on iOS on Duo's Website.
If you set your Duo Security authentication through your mobile device (such as a smartphone or tablet), you are encouraged to add a backup telephone number to your Duo authentication options, such as a landline in your office. These devices use the Call Me method.
Call Me works for phones with US and Canada area codes.
Learn more information about Using Duo With Any Cell Phone or Landline on Duo's Website.
Touch ID with Duo is currently only available on the Chrome browser for MacBook Pro or MacBook Air devices with a Touch ID button.
You must use a non-private Chrome browsing window for Touch ID enrollment or authentication. Duo can't use Touch ID in an Incognito window.
If you have more than one MacBook with which you'd like to approve Duo login requests using Touch ID, you'll need to enroll each of them separately as a new Touch ID device in Duo.
Learn more information about Touch ID and Duo on Duo's Website.
Duo hardware tokens are small fobs that generate passcodes for Duo access. Each hardware token is tied to one user. The passcodes generated by that token can only be used by that user.
We recommend requesting a token only if you have a business need or if you cannot use Duo on other devices.
Learn more information about Using Duo With a Hardware Token on Duo's Website.
In some situations, you may not be able to use your usual authentication method. You can generate 10 single-use bypass codes for future use, good for a period of 1 year (365 days) after they are generated.
- Note: Any time you generate new bypass codes, any remaining previously-generated bypass codes become void and will no longer work.
If you have not enrolled a backup device and/or have not generated bypass codes in advance, you can also get a temporary single-use security code by calling Technology Help or visiting a walk-in location with a valid ID.
Security Keys are tokens that generate passcodes for Duo access. You must purchase a Security Key to use this method.
Note: We recommend using a Security Key only if you cannot authenticate Duo using other methods.
Learn more information about Security Keys on Duo's Website.