Duo: Manage Your Duo Account and Devices

Duo Security (two-factor authentication) is stronger than a password alone, because it uses multiple factors to confirm your identity. The first factor is something you know (your Internet ID and password); the second factor is something you have (your devices).

This article tells you how to set up, manage, and remove devices for your Duo account.

Notes:

In this article:

Accessing the Manage Duo Devices Menu

If you have previously created your UMN Duo account, you can access your device settings from your account (my-account.umn.edu)

  1. If you have not enrolled a device before, you will need to create your Duo account first. 
    • You should be prompted to do this when you log in to your UMN account for the first time.
    • You can also sign in to my-account.umn.edu with your Internet ID and password.
  2. In the Self-Service menu on the left side of the page, click Duo Security.
    1. Click Create or Manage Duo Account and sign in.
      My Account. Duo Security menu expanded. Create of Manage Duo account highlighted.
  3. Click the green Start Setup button.
  4. Follow the directions below for the device(s) you have chosen to enroll.

Notes: 

  • Unless this is your first time setting up Duo on your UMN account, you will always be prompted to authenticate with Duo.
  • If you are unable to authenticate with Duo, please contact Technology Help at 612-301-4357 (1-HELP from any University phone).
    • For security, Technology Help must first verify your identity. You will need:
      • At least one valid government issued photo ID, such as a UCard, passport, Driver's License, CAC Card, etc. 
      • A webcam (if verifying over a web conferencing tool, such as Zoom)

Adding Devices

You may have up to 20 devices associated with your Duo account. If you are adding a device that is already associated with another Duo account (for example, if you already use Duo with another institution) you will be prompted to verify the device by answering a call. 

Notes:

  • We recommend following these steps while using a computer or laptop.
  • If you are prompted to add a device using a QR code but find you are unable, you may choose the option to receive an email for an activation link.
  1. From your account (my-account.umn.edu), Duo Security Menu, choose Create or Manage Duo Account.
    1. Sign in using Duo.
  2. To add a new device to your Duo account, click Add another device
    Duo management, my settings and devices. Add another device highlighted.
    • You can add several different kinds of devices including:
  3. Follow the on-screen instructions to scan the QR code using Duo Mobile.
    • If you are unable to scan the QR code, choose Email me an activation link instead and follow the instructions.
      Activate Duo mobile screen with QR code instructions. "Email me an activation link instead" highlighted.

Reactivating Devices

If you upgrade your phone but keep the same phone number, you can continue to authenticate using a phone call. However, to allow push notifications and passcodes on the new device, you will need to reactivate the device in Duo. 

  1. From your account (my-account.umn.edu), Duo Security Menu, choose Create or Manage Duo Account.
    My Account. Duo Security menu expanded. Create of Manage Duo account highlighted.
  2. You will be prompted to sign in. In the list of devices, select Device Options next to the phone you wish to reactivate. 
    Duo management, My Settings & Devices. Device options highlighted next to example cell phone
  3. Select Reactivate Duo Mobile.
    Duo management, My Settings & devices. Device options expanded for Cell phone. Reactivate Duo Mobile highlighted
  4. Follow the on screen instructions.
  5. You will receive an automated phone call to verify your identity.

Removing Devices

You can choose to remove devices from your Duo account. You should do this for any device you no longer possess or use.

To remove a device:

  1. From your account (my-account.umn.edu), Duo Security Menu, choose Create or Manage Duo Account.
    1. Sign in using Duo.
  2. In the list of devices, click Device Options next to the device you wish to remove. 
    Duo management, My Settings & Devices. Device options highlighted next to example cell phone
  3. Select the trash can icon.
    Duo management, My Settings & devices. Device options expanded for Cell phone. Trash can "remove" icon highlighted.

Setting Default Devices and Behaviors

You can set up Duo to automatically send an authentication request to your preferred device when you log in.

Note: As of January 2021, the University's Virtual Private Network (VPN) uses Duo, which automatically sends an authentication request to your default device. If you have not selected a default device, it will send an authentication request to the first option in your listed devices. 

  1. From your account (my-account.umn.edu), Duo Security Menu, choose Create or Manage Duo Account.
    1. Sign in using Duo.
  2. Below the list of devices you can set your:
    • Default device
    • Preferred Duo behavior when you log in for that default device
      Manage duo window with device options. "Default device with cell phone" selected, "When I log in: Automatically send this device a push" highlighted.

Note: If you would like to choose a method other than the default but have opted to automatically login using Remember me for 7 days, you can cancel the automatic authentication and select the desired authentication method. 

Frequently Asked Questions

It says that my Duo is locked out. How long does that last?

Your Duo account can become locked after multiple failed authentication attempts. Once this lockout is triggered, it lasts for 15 minutes after the most recent authentication attempt. Waiting 15 minutes should clear the lockout, but if you still cannot login after 15 minutes, please contact Technology Help at 612-301-4357 (1-HELP from any University phone).

I can authenticate to websites like MyU, but when I try to access the VPN, it won't let me in. 

This is usually because Duo is trying to authenticate with a device you are not expecting it to, or no longer have access to. When signing into the VPN, Duo automatically sends a push or call to your Default Device. If you do not have a default device selected, it will attempt to call or send a push to the first device on your account it is able to.

I do not have access to my Default Device to authenticate the VPN. What do I do?

You can choose to change your default device, or you can choose another method, such as a phone call, passcode, or a push to a different device:

TDX ID
3990