Two-Factor Authentication with Duo

What is Two-Factor Authentication (2FA)?

2FA is an additional layer of authentication beyond a username and password. 2FA involves something that you know (password) plus something that you have with you (like a cellphone or tablet) to prevent someone from logging in with only your password. With Duo 2FA, you still enter your username and password. The second factor provided by Duo is simply an added layer of security on top of your existing credentials. More information about Two-Factor Authentication.

Why are we moving to Two-Factor Authentication?

Two-Factor Authentication (2FA) is the most effective way to secure our computer accounts and it is easy to use! If you’ve ever received a text message to confirm your identity when you log into an online retailer or banking site, you’ve used 2FA. It allows you to confirm your identity by text message, mobile application, and other methods.

What authentication method is right for me?

• Duo Push - if you prefer using a mobile app, download the Duo Mobile App. Push notifications are the fastest way to confirm your identity but requires you to run the DUO mobile app on your smartphone. You can download the Duo Mobile App on Android and iOS Devices.
• Passcode - if you prefer to enter codes created within the Duo Mobile App, receiving SMS texts to your mobile device, using a hardware token provided by an administrator. Passcode doesn't require you to be online but requires a special device or mobile app on your phone. If using the SMS text option, click Send Codes to have a new passcode texted to your phone.

Duo authentication methods can be configured at:

• Hardware Token - You can purchase a hardware token through CougarByte at UH Central.  You must select the one specifically for UH-Clear Lake. Once purchased, contact the OIT Support Center to pick up and configure your hardware token.  
• Security Key - A security key plugs into your USB port and when tapped or when the button is pressed it sends a signed response back to Duo to validate your login. Duo uses the U2F and WebAuthn authentication standards to interact with your security keys. You can enroll your security key during the initial self-enrollment process or, if you have already enrolled in Duo using a different device (like your mobile phone), you can add your security key as an additional authentication device from the device management portal.

Whichever method you choose, please make sure to check 30-day authentication box.  Checking this box means that you won't be prompted by DUO again for 30 days.  After 30 days, you will need to authenticate again.  

How to set up the Duo App on your smartphone

All users will get an automated email from Duo Security containing a device registration link. Once setup has begun:

• Select the Mobile phone option
• Enter your phone number
• Select your device type
• If you haven't already, install the Duo app for iPhone or Android
• A QR Code will appear on the screen - scan it into the Duo App
• Select your default activation method and click Finish Enrollment.

Frequently Asked Questions