Options for Duo Multi-Factor Authentication

Northwestern University leverages multi-factor authentication from Duo to add an additional layer of protection when accessing University systems and services. Below is a summary of options available for multi-factor authentication within Duo.

Duo Mobile App

The Duo Mobile app is the recommend way of using multi-factor authentication. The Duo app is compatible with iOS and Android devices, including tablets, and it is the preferred method for verifying your identity. The Duo app, combined with an internet connection, allows for a “push” notification that will prompt you to enter a six-digit code. If an internet connection is unavailable (when traveling or otherwise), the Duo app can generate offline codes that can be used instead.  Review this Knowledge Base article to learn how to switch to the Duo app. 

Other Options for Multi-Factor Authentication

If you are unable to use the Duo Mobile app, there are other options available for multi-factor authentication:

1. Biometric authentication (TouchID or Windows Hello)

If your devices support TouchID (for macOS), Windows Hello (for Windows), or other biometric authentication, you can self-register these systems to use with Duo. Review Duo’s instructions or this Knowledge Base article to learn how to register your biometric authenticator. 

2. Yubikey

The YubiKey is a hardware authentication device that plugs directly into your computer and is used whenever MFA is required to log into a University system. One downside is that you must always have it on hand to log in. If you leave it at home or work or lose it outright, you will be unable to access University systems temporarily. A list of compatible YubiKeys can help you select the correct model that will work with your computer. YubiKeys can be self-registered in Duo, similar to a biometric authenticator. Instructions on how to self register a Yubikey can be found on this Knowledge Base article.

3. Duo Hardware Token

A Duo hardware token is a small, battery-powered device that attaches to a keychain. Pressing a button on the token generates a code on the built-in display, and it does not require cellular or internet service to receive passcodes. Duo hardware tokens work best for multi-user environments, such as departmental email accounts. Duo hardware tokens must be pre-configured to specific NetIDs and are available to purchase with a chartstring from NUIT. Please contact the NUIT Service Desk for more information about Duo hardware tokens.