Below is an overview of all 2nd factor options available to you when using Duo.

Duo Push (Recommended)

After logging in with username and password, users can choose Send Duo Push on the authentication prompt. Then, they can simply tap ‘Approve’ on the push notification they'll receive on their device.

Requires: Duo Mobile app installed on a Apple iOS or Google Android device

Duo Mobile Passcode

After logging in with username and password, users can choose Use Duo Mobile passcode on the authentication prompt. Using the Duo Mobile app on their device to display a six-digit passcode, the passcode is typed into the Duo prompt.

Requires: Duo Mobile app installed on a Apple iOS or Google Android device. No internet or cellular connection is needed, making this a great travel or backup method. 

Phone Callback

After logging in with username and password, users can choose Call phone on the authentication prompt. Duo will call the phone with an automated message prompting the user to press any key to verify the authentication request.

Requires: Any phone, landline or cellular, with phone service available

International numbers are NOT supported.

SMS Text Passcode

After logging in with username and password, users can choose  Sent text message passcode on the authentication prompt. After receiving a six-digit passcode via SMS text message, the passcode is typed into the Duo prompt.

Requires: Any cell phone capable of receiving SMS Text messages

International numbers are NOT supported.

Security Key (Yubikey)

After logging in with username and password, users can choose Use security key on the authentication prompt. With the YubiKey plugged into a USB port on the computer, the user touches the YubiKey's gold-colored contact to log in when prompted.

Requires: YubiKey and an available/corresponding USB-A or USB-C port on the computer being used

Token (Feitian or Yubikey OTP)

After logging in with username and password, users can choose Use hardware token on the authentication prompt. After receiving a six-digit passcode by pressing the token's button, the passcode is typed into the Duo prompt. If supported, a YubiKey can also produce a passcode.

Requires: Token device

Touch ID (Mac)

After logging in with username and password, users can choose Use fingerprint sensor on the authentication prompt. When prompted, the user touches the Touch ID button on their keyboard.

Requires: A MacBook Pro or MacBook Air with a Touch ID button. A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site). Chrome 70 or later

Important Note: This will only allow you to authenticate while using your computer with Touch ID. Adding another 2FA method in addition to Touch ID is strongly recommended.