Eastern Washington University

(509) 359-2247
Login

Duo 2FA Methods Overview

Modified on: Mon, Jan 23 2023 2:41 PM

Below is an overview of all 2nd factor options available to you when using Duo.


Duo Push (Recommended)


After logging in with username and password, users can choose Send Duo Push on the authentication prompt. Then, they can simply tap ‘Approve’ on the push notification they'll receive on their device.


Requires: Duo Mobile app installed on a Apple iOS or Google Android device





Duo Mobile Passcode


After logging in with username and password, users can choose Use Duo Mobile passcode on the authentication prompt. Using the Duo Mobile app on their device to display a six-digit passcode, the passcode is typed into the Duo prompt.


Requires: Duo Mobile app installed on a Apple iOS or Google Android device. No internet or cellular connection is needed, making this a great travel or backup method. 




Phone Callback


After logging in with username and password, users can choose Call phone on the authentication prompt. Duo will call the phone with an automated message prompting the user to press any key to verify the authentication request.


Requires: Any phone, landline or cellular, with phone service available


International numbers are NOT supported.




SMS Text Passcode


After logging in with username and password, users can choose  Sent text message passcode on the authentication prompt. After receiving a six-digit passcode via SMS text message, the passcode is typed into the Duo prompt.


Requires: Any cell phone capable of receiving SMS Text messages


International numbers are NOT supported.



Security Key (Yubikey)


After logging in with username and password, users can choose Use security key on the authentication prompt. With the YubiKey plugged into a USB port on the computer, the user touches the YubiKey's gold-colored contact to log in when prompted.


RequiresYubiKey and an available/corresponding USB-A or USB-C port on the computer being used


Token (Feitian or Yubikey OTP)


After logging in with username and password, users can choose Use hardware token on the authentication prompt. After receiving a six-digit passcode by pressing the token's button, the passcode is typed into the Duo prompt. If supported, a YubiKey can also produce a passcode.


Requires: Token device



Touch ID (Mac)


After logging in with username and password, users can choose Use fingerprint sensor on the authentication prompt. When prompted, the user touches the Touch ID button on their keyboard.


RequiresA MacBook Pro or MacBook Air with a Touch ID button. A fingerprint enrolled in Touch ID (see how to do this at the Apple Support site). Chrome 70 or later


Important Note: This will only allow you to authenticate while using your computer with Touch ID. Adding another 2FA method in addition to Touch ID is strongly recommended.