Duo Security multi-factor authentication adds an additional layer of protection to your University of Minnesota account. Duo Security is required for all students, faculty, and staff at the University of Minnesota.
In this article:
Enabling Duo Security
Duo Security can be enabled for most University of Minnesota accounts, including departmental and student organization accounts. Note that it is not possible to remove an account from Duo after opting in.
To enable Duo Security for your account:
- Sign into my-account.umn.edu with your UMN internet ID and password.
- Select Duo Security from the navigation menu.
- In the drop-down menu, select Enable Duo Security.
- Select Yes to opt in, then select Submit.
Adding Duo Devices
We strongly recommend adding at least two different devices to your Duo Security account. By doing so, you will still be able to access your Duo account using your secondary device even if your primary Duo device is broken or inaccessible.
Smartphones and Tablets
We recommend enrolling your smartphone or tablet as your primary Duo device.
- The Duo Security mobile application is available for smartphones and tablets in both the Google Play store and the Apple App Store.
- Visit Duo Security's website for more information about Duo Mobile on Android and Duo Mobile on iOS.
The Duo Mobile application offers a variety of different ways to authenticate your identity when signing into University websites and services.
- You can use Duo Push notifications, enter a Passcode, or use the Call Me option with smartphones tied to a US phone number.
- You can receive Duo Push notifications and generate passcodes on your tablet or smartphones tied to an international phone number.
Landlines and Other Cellphones
We recommend enrolling a backup phone number (such as your home phone or office telephone) in case you are unable to access your primary Duo device.
You can enroll a landline or cellphone with a US phone number in Duo Security for use with the Phone call authentication method.
Touch ID
Touch ID with Duo is currently only available on the Chrome browser for MacBook Pro or MacBook Air devices with a Touch ID button.
You must use a non-private Chrome browsing window for Touch ID enrollment or authentication. If you have more than one MacBook that you'd like to use to approve Duo login requests using Touch ID, you must enroll each of them separately as a new Touch ID device.
Face ID/Touch ID on iPhone or iPad
In order to use Face ID or Touch ID on an iPhone or iPad with Duo, make sure you have the following:
- An iPhone or iPad that supports Face ID or Touch ID.
- Face ID or Touch ID already set up on the iPhone or iPad. Learn how to set up Face ID or set up Touch ID at the Apple Support site.
- iCloud Keychain sync enabled on all the Apple devices you will use with Duo and the passkey you will create during setup.
Hardware Tokens
Duo hardware tokens are small fobs that generate Duo authentication passcodes. Each hardware token is tied to one user and generates passcodes that can ONLY be used by that user.
We recommend requesting a Duo hardware token only if you have a business need or if you cannot use Duo on other devices.
Bypass Codes
You can generate 10 single-use bypass codes at a time for future use in situations where you may not be able to use your usual Duo authentication method.
These codes are valid for a period of 1 year (365 days) after they are generated. Any time you generate new bypass codes, your previously-generated bypass codes will become void.
Security Keys
Security Keys are tokens that generate passcodes for Duo access. You must purchase your own Security Key to use this method of authentication.
Security Keys are recommended for international students and those who may have trouble authenticating with other methods.