What is Duo Push?
Duo Push is the easiest form of secondary authentication. Once Duo Mobile is installed and activated on your phone, you can authenticate with just one tap of a button.
Duo Push doesn’t slow you down while you’re trying to access your applications, and doesn’t require any extra hardware tokens - only your own personal phone.
How do I use it?
- Make sure you’re signed up for a Duo account, and you’ve downloaded Duo Mobile to your device.
- Log into your application with your username and password.
- On the Two-Factor Authentication prompt, select Duo Push and press Log in.
- A push notification will be sent to your device within seconds. Press Approve.
- You’re in!
What devices does it work with?
Is it secure?
Yes. Duo Push is an out-of-band authentication method delivered over a mutually-authenticated secure transport. Duo Push is designed to protect against man-in-the-browser and other credential theft attacks.
We use asymmetric cryptography to sign and verify communications between Duo’s servers and Duo Push-enabled smartphones.
A private key is delivered to the mobile device and is used to sign authentication responses, while the public key verifies the signature on the server side.
That means even if Duo’s database is breached, an attacker wouldn’t be able to forge two-factor authentication and access your accounts. Read more >>