These verification options do not show up in the list of available options. Only your organization's Duo administrator or help desk can add hardware tokens and Yubikey OTP tokens for you. Phone number: Receive a one-time passcode in an SMS message or approve a login attempt with a phone call from Duo.

Requires Chrome, Safari, Firefox, or Edge.

Security key: Tap a WebAuthn/FIDO2 security key.

Duo Mobile: Approve Duo Push verification requests on iOS or Android devices, or generate a one-time passcode from the Duo Mobile app.

Device verification: Use Android Biometrics on Android devices.

Windows Hello: Use your Windows Hello PIN, scan your fingerprint, or use facial recognition on Windows devices.Face ID: Use the face scanning feature on iPhone.

Touch ID: Use the fingerprint sensor on Apple MacBooks, Magic Keyboards, or iPhone.Step Two: Choose Your Verification MethodĬhoose the device type in the list that matches your desired authentication experience: Click Next to learn why protecting your identity with two-step verification is important and begin the setup process. Logging into a Duo-protected application enabled for self-enrollment takes you to the device management page to enroll. You'll see either the Universal Prompt experience shown on this page or enrollment in the traditional Duo prompt depending on your organization's email enrollment configuration. This emailed link takes you directly to the Duo enrollment portal. Instead of enrolling when you log in to an application, you might receive an email from your organization's Duo administrator with an enrollment link instead. Follow the on-screen prompts to set up your Duo authentication device. Duo prompts you to enroll the first time you log into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. First-time Enrollment in DuoĮnrollment is the process that registers you as a user in Duo with a device capable of performing two-factor authentication. When the Universal Prompt displays English, Spanish, French, German, or Japanese, phone callback authentication will use the same language shown in the prompt.Ĭatalan, Chinese (Simplified), Chinese (Traditional), Czech, Danish, Dutch, Finnish, Hindi, Indonesian, Italian, Korean, Norwegian, Polish, Portuguese (Brazil), Portuguese (Portugal), Swedish, Thai, Turkish, and Vietnamese languages will display in the Universal Prompt, but phone callback authentication will be in English. Your browser's language settings determine the language shown in the Universal Prompt, with no extra configuration necessary. Linux has no supported platform authenticators. Firefox on Android 10 and 11 does not support Android biometric enrollment.Security keys that already have a PIN set can be used to authenticate in Firefox. Firefox on macOS cannot prompt to create a security key's PIN.See the iCloud documentation for instructions specific to your device types: You must sign in with the same iCloud account and enable iCloud Keychain sync on all the Apple devices you plan to use with Duo and passkeys. Windows Hello is not supported in Chrome Incognito or Edge InPrivate browsing sessions.While other browsers may work, Duo actively tests and supports the browser minimum versions listed in the tables. WebAuthn Supported BrowsersĬheck the tables below for supported browser versions for platform authenticators (like Touch ID, Face ID, Windows Hello, or Android biometrics) and roaming authenticators (like security keys). If your browser or client is not compatible, Duo will show you the traditional prompt experience instead. When you log in Duo checks your current browser or client compatibility with the Universal Prompt. While other browsers may work with the Universal Prompt, Duo actively tests and supports the browsers and minimum versions listed in the table. Duo's support for the minimum browser version includes Duo Push, passcode, and phone call authentication options.

Platform and roaming authenticators may require a different browser or a newer minimum browser version, please refer to WebAuthn Browser Support. Not all browsers support all Duo authentication methods, so for the widest compatibility we recommend Chrome.Ĭheck the table below for supported browser versions and Duo login option compatibility. The Universal Prompt supports Chrome (Desktop and Mobile), Firefox, Safari (Desktop and Mobile), Edge, and Internet Explorer.

Reactivate Duo Mobile for an Existing Device.

Step Two: Choose Your Verification Method.

Download duo mobile app