Understand the available authentication methods for Duo MFA.
Overview
There are lots of different verification methods that you can configure for your MHC Duo account. LITS recommends that everyone have at least two methods set up in order to minimize the likelihood that you need to reach out for support when your devices change.
This article explains the available Duo verification methods, how to select the one you want to use, and includes some advice for Duo and international travel.
Duo verification methods
| VERIFICATION METHOD |
NOTES |
LITS SUPPORT |
Verified Duo Push
(using the Duo Mobile app) |
Recommended
- Requires an Android or iOS device compatible with the Duo Mobile app
- Users can set up multiple devices with the Duo Mobile app (ex. a phone and a tablet)
- Can operate on WiFi / Does not require cellular data to function
- Allows you to log into Duo-protected services on any device, so long as you have your phone/tablet with you
If you haven't set up Duo yet, enroll in Duo and set up the Duo Mobile app for Verified Duo Push.
If you already have another method configured, you can manage your devices to set up the Duo Mobile app.
|
Full |
| Hardware Token passcode |
Alternate
- Available upon request to faculty and staff who aren't able to use the Duo Mobile app
- Does not require WiFi or cellular data
- Allows you to log into Duo-protected services on any device, so long as you have the hardware token with you
|
Full |
| SMS Text message passcode |
Alternate
- Available upon request to students who aren't able to use the Duo Mobile app
- Requires cell signal
- Allows you to log into Duo-protected services so long as you have your phone with you
|
Full |
Platform authenticators
(ex. Touch ID, Windows Hello, Android Biometrics, iCloud Keychain) |
Extra / Convenience
- Availability depends on your device(s)
- Requires WiFi / internet connection
- Allows you to log into Duo-protected services ONLY on the device(s) where they are already configured
- Should NOT be your only configured verification methods as they do not allow you to complete Duo verification on other devices (like a classroom or lab computer)
Want to add a platform authenticator? Manage your Duo devices
|
Best effort |
| Bypass Code |
Fail safe
Will be the only option if you have no configured verification methods, OR if your other verification methods are not available
-
If you have other verification methods configured elsewhere, follow the manage devices instructions to add additional verification methods (like Verified Duo Push) so you can access Duo-protected services on that device
-
|
Full |
| 6-digit Passcode (in the Duo Mobile app) |
Not available
While your Duo Mobile app will continually generate new 6-digit passcodes, MHC does not allow users to complete verification using that method. Simply ignore the passcodes generated in the app. |
N/A |
| Phone call |
Not available
This Duo verification method is not available at MHC. |
N/A |
Selecting a different Duo method than the one that is offered
If you've configured several verification methods for Duo (as recommended), then you may find that you want to use a different one from what is offered to you by default in a given scenario.
The method you use most often on that device/browser will become the one that is offered by default. You can always decide to use another available verification method that you've configured.
When prompted for Duo verification, select Other options and then select the listed verification method of your choice.
Verification methods and international travel
The Duo Mobile app will work outside of the US even if you don't have cellular data. It only requires a WiFi connection.
However, if you replace your phone or get a new phone number as part of that travel (ex. when studying abroad), the connection between your MHC Duo account and your device may be broken and the Duo Mobile app will need to be reactivated.
In some scenarios, students studying abroad have reported errors in the Duo Mobile app. Platform authenticators like Touch ID or Windows Hello can be useful as alternatives in this situation.
There are also some regions where Duo is unavailable.