As of February 2020, departmental accounts must either:
Try the troubleshooting tips below if you have read through the Duo
If you set your Duo authentication through your mobile device (such as a smartphone or tablet), you are encouraged to add a backup telephone number to your Duo authentication options in case you forget your mobile dev
Congratulations on your new phone!  Here's how to enroll it in Duo.  In this article:
Usernames and passwords are vulnerable to security breaches.
We strongly recommend enrolling at least 2 devices to ensure that you are able to access Duo at all times - even if you have lost your smartphone or are working somewhere with no cell service.
Duo hardware tokens are small fobs that generate passcodes and are used as part of two-factor authentication sign-in at the University.
Duo Security (two-factor authentication) is stronger than a password alone, because it uses two factors to confirm that you are who you say you are.  The first factor is something you know (your Inter
By November 2019, Duo will be required at sign-in for all UMN faculty, staff, student, sponsored, and POI accounts.  For instructions on setting up Duo, check the Duo 
In some situations, you may not be able to use a mobile device to authenticate. For instance:
There are two kinds of tokens that you can use as your Duo device:
You can authenticate with Duo using two types of tokens: Hardware tokens (first and second images below) and security keys (also called 'U2F tokens', third image below).
Lost Hardware Token Duo works with two types of tokens: U2F tokens (also referred to as 'security keys') and hardware tokens. This page describes what to do if your hardware token is lost or broken. 
There are various scenarios where you may need to remove a device from your Duo page in Self-Service:
Managers or supervisors with employees who have a business need to access databases and enterprise-level applications that use Duo must request access to those services (via an Access Request Form, or ARF).  When a fa
When any University employee (staff, faculty or student employee) or contractor ends their employment with the University, the supervisor needs to revoke access to any Enterprise systems
If you do not have your usual Duo device, use your backup device or your
If you have enrolled a landline to your Duo authentication method, you ca
Background China (Mainland/People's Republic of China) has implemented technologies to regulate the Internet domestically.
This article applies to international employees as well as traveling students, faculty, and staff. You can use Duo authentication when traveling internationally*, even without WiFi or cellular service.
After enrolling a mobile device to use for authentication, you have two ways to authentica
Anyone with a UMN Internet ID can use Duo two-factor authentication for all University sign-in pages.
Certain Departmental Pools, and starting September 16, 2020 both General Access Full and Split Tunnel VPN pools will require Two Factor Authentication (2FA) through


Users agree to comply with the laws or regulations of the United States Department of Commerce, the United States Department of Treasury Foreign Assets Control, or any other applicable United States foreign agency or
This four-minute video shows how to enroll a variety of devices, such as cell phones, for use with Duo two-factor authentication.
This one-minute video demonstrates how to use a push method on your mobile device to authenticate with Duo two-factor authentication.

Self-Help Guides

Duo Security is the University's way of adding another layer of security to the information you access online.