Duo Security Devices
Multi-factor authentication (MFA) adds an additional layer of security on your accounts by requiring two forms of verification before granting access to an account. CTS uses Duo Security tools to manage the second form of verification. Once you are enrolled in Duo, you will use a second device in addition to your password to sign in to MFA-enabled services. For a complete list of MFA-enabled services, visit duq.edu/authentication.
Devices you already own, such as a mobile phone or Apple Watch, can be enrolled in Duo for MFA logins. In addition, there is no limit to the number of devices you can enroll in Duo. CTS recommends registering at least two different devices in case you do not have access to one of your devices. For instance, you can enroll your mobile phone as well as your office landline phone in Duo. If you would leave your mobile phone at home, you could still log in to MFA-enabled services using your office landline phone.
Step 1: Decide which MFA devices best suit your needs
The table below describes each of the MFA devices you can use for logging in to MFA-enabled services. CTS recommends enrolling devices you currently own in Duo.
|Device||Requirements||Best Suited For||Comment|
Mobile phone (iPhone, Anrdoid phone, Google Pixel, etc.)
|Supported OS version and Duo Mobile app||Highly convenient for most users and is typically the primary MFA device||CTS recommends all users register their mobile phone as an MFA device|
|Tablet (iPad, Android tablet, etc.)||Supported OS version and Duo Mobile app||Convenient for users that use their tablet to access MFA-enabled services||Tablets can serve as a single device for both access and MFA|
|Apple Watch||Supported OS version and Duo Mobile app||Users with access to an Apple Watch||Apple Watches offer the most convenience when using MFA|
|Duo Hardware Token||Available for purchase at the Duquesne University Computer Store||Individuals without access to mobile devices, a landline phone, or Apple Watch||Requires users to correctly type a unique code for each login (less convenient)|
|YubiKey USB dongle||Available for purchase at the Duquesne University Computer Store||Individuals without access to mobile devices, a landline phone, or Apple Watch||More convenient than a Duo Hardware token since it does not require typing a code for each login|
|Landline phone||Your office desk phone and/or your home phone if you telework||Individuals without mobile devices||CTS recommends registering your office desk telephone|
Step 2: Enroll a device you own in Duo
Devices such as mobile phones, tablets and Apple Watches can be enrolled in Duo. Most individuals own some or all of these devices and carry them with them throughout the day. CTS recommends enrolling at least one of these devices in Duo. This helps ensure you always have at least one device on you at all times that can be used to complete an MFA login.
Reminder: after enrolling in Duo, you will be required to complete an MFA login when signing in to MFA-enabled services.
- Download the Duo Mobile app for your compatible mobile device.
- Visit duq.edu/multipass.
- Enter your MultiPass username in the User ID field.
- Click Change MultiPass.
- Enter your current MultiPass password and click Continue.
- Navigate to the Duo Multi-Factor Authentication Setup section to enroll your device.
Below is an image of the Duo Device Management portal in MultiPass:
To learn more about MFA and Duo, visit duq.edu/duo.