Authentication Methods
Duo supports multiple authentication methods, providing flexibility for you and your users, who can choose which device and method to use each time they log in.
Duo Mobile
Duo Mobile is a mobile application (available for free on iPhone, Android, Palm, Blackberry, and Windows Mobile) that generates passcodes for authentication. Users are prompted to download and activate the application during enrollment.
You can generate passcodes with Duo Mobile at any time, even without cell service or Wi-Fi connectivity.
Duo Push
Duo Push is a part of Duo Mobile on iPhone and Android. Choosing Duo Push as your authentication option will immediately send a login request to your phone. You can review the specifics of the request (integration, location, etc.) and then approve or deny it. If you deny the request, you can report it as fraudulent which will notify the system administrator of possible malicious activity. Watch the Duo Push demo video »
Phone call
Duo will call your phone and ask you to press any key to authenticate. You can also set custom keys for authentication and fraud reporting in the administrator's Settings:
SMS passcodes
Duo will text you a batch of passcodes:
These passcodes can be used in the Passcode box when logging in:
The batch size (number of passcodes delivered at a time) and message prefix (text before the passcodes) can be changed in the administrator's Settings:
These passcodes are useful for phones that can't install Duo Mobile and can't rely on cell service for phone callback authentication. Users can store SMS passcodes for use in places without cell coverage, when traveling internationally, or in situations where answering a phone call would be inconvenient.
Hardware tokens
Hardware tokens can be added to a user's account through the Users section of the administration interface.
To purchase hardware tokens, visit the Billing section of the administration interface.