1. Home
  2. Accounts and Access
  3. Duo Multi-Factor Authentication
  1. Home
  2. Security
  3. Duo Multi-Factor Authentication
  1. Home
  2. Smart Phones and Tablets
  3. Duo Multi-Factor Authentication

Duo Multi-Factor Authentication

Duo Security is a multi-factor authentication tool used by the University of Vermont to protect sensitive information. Upon logging into a Duo-protected site, you will be required to perform an additional authentication step via Push notification to a smart phone or tablet, SMS text, or phone call.

To use Duo, you must enroll a device to act as your secondary authentication factor.

See our FAQ for answers to common questions about Multi-Factor Authentication at UVM.

Manage your MFA Devices Here

Consider enrolling a second device through UVM's Duo Security, or safely store a set of Offline Codes.

If you have offline codes or a second enrolled device available, you can still log into critical UVM services in cases where your primary device is forgotten, lost, damaged, or when you need to set up a new primary device.

There are five physical devices that you can use to provide the second factor of two-step authentication. Each device has one or more authentication methods available. Expand the toggle below to view all supported devices and authentication methods.

Devices and supported authentication methods

Device Type Authentication Options Supported Platforms
Smartphone
  • Duo Mobile push notification (recommended)
  • Duo Mobile passcode
  • SMS text message (not recommended)
  • Phone call
  • iOS
  • Android
Tablet
  • Duo Mobile push notification (recommended)
  • Duo Mobile passcode
  • iOS
  • Android
Mobile Phone
  • SMS text message
  • Phone call
  • Mobile phones with SMS text messaging capability.
Landline
  • Phone call (not recommended)
  • All phones
Backup Access (Offline) Codes
  • Passcode
  • A printed list of 10 passcodes that can be used when other MFA options are not available.
Hardware Token
  • Passcode
  • A YubiKey hardware token provides two-step codes at the push of a button.

Enroll a device in Duo

Add a Smart Phone

  1. Your smartphone needs to be connected to the internet.

    1. Visit https://account.uvm.edu/multifactor and enter your UVM NetID and password, if prompted.

      If you’ve previously enrolled a device in Duo, you may receive a prompt asking you to use your currently enrolled MFA device(s) to access this page. If none of your second factor devices are available, please contact the UVM Tech Team.

    2. Click Activate/Manage Duo Security.
      1
    3. Click Add Device.
      screen-shot-2016-10-14-at-9-04-46-am
    4. Select Mobile for the type, choose the appropriate platform, enter your phone number (with area code), enter a nickname for your phone, then click Add Device.
      screen-shot-2016-10-14-at-9-19-16-am
  2. You will receive two sms text messages. The first message contains a link to download and install the Duo app on your device. Follow that link and install the app if you haven’t already installed it.
    • If you have not already installed Duo, you can click this link to launch your App Store (iOS) or Google Play store (Android) to install the app.
      4
    • Once your device’s App Store (iOS) or Google Play store (Android) has launched, click the “Get” or “Install” button to download and install the Duo Mobile app. The Duo mobile app uses Push notifications. If prompted, you should “Allow Push Notifications” in order to use the Push authentication method.
      5a
  3. When the Duo mobile app installation completes, open the second sms text message you’ve received. This message provides a link which will activate your Duo mobile app for use with your UVM account.
    • Click the link to activate your Duo mobile app.
      6
    • Your phone may ask for your permission to open the Duo mobile app. If prompted, tap the “Open” button. (If you receive a prompt asking whether to open the link in Duo or your web browser, choose Duo.)7
  4. You should now have successfully activated your Duo mobile app.
    8

Still not receiving push notifications from Duo Mobile?

Add an iPad or Android Tablet

The following steps will guide you through enrolling your iPad or Android tablet in Duo Security for Push and passcode authentication.

  1. Your tablet needs to be connected to the Internet.

  2. Navigate to your tablet’s App Store (iOS) or Google Play Store (Android). Search for the Duo Mobile app and install it on your device. If prompted, you should Allow Push Notifications. When the app is installed, proceed to step 3.
    5a
  3. Visit https://account.uvm.edu/multifactor and enter your UVM NetID and password, if prompted.

    If you’ve previously enrolled a device in Duo, you may receive a prompt asking you to use your currently enrolled MFA device(s) to access this page. If none of your second factor devices are available, please contact the UVM Tech Team.

    • Click Activate/Manage Duo Security.
      1
    • Click Add Device button.
      screen-shot-2016-10-14-at-9-04-46-am
    • Select Other/Non-phone as the type, choose the appropriate platform, enter a nickname for your tablet, then click Add Device.
  4. A QR code will appear on the following screen. This code will be used to link your Duo Mobile device with your UVM account.

    • In the Duo Mobile app on your tablet, tap the icon in the upper right corner. Tap Allow if Duo Mobile asks for permission to access your camera. The camera is used to scan the QR code.
    • Point your tablet’s camera at the QR code to associate your UVM account with the Duo Mobile app.
  5. You should now have successfully activated your Duo mobile app.

Still not receiving push notifications from Duo Mobile?

Add a Non-Smart Phone

The following steps will guide you through enrolling your cell phone in Duo Security for SMS authentication.

  1. Visit https://account.uvm.edu/multifactor and enter your UVM NetID and password, if prompted.

    If you’ve previously enrolled a device in Duo, you may receive a prompt asking you to use your currently enrolled MFA device(s) to access this page. If none of your second factor devices are available, please contact the UVM Tech Team.

  2. Click Activate/Manage Duo Security.
    1
  3. Click Add Device.
    screen-shot-2016-10-14-at-9-04-46-am
  4. Select Mobile as the type, choose Unknown for platform, enter your phone number (with area code), enter a nickname for your phone, then click Add Device.
    screen-shot-2016-10-14-at-9-01-01-am
  5. Your phone should now have been properly added to the Duo Security system.

Add a Landline or Office Phone

  1. Visit https://account.uvm.edu/multifactor and enter your UVM NetID and password, if prompted.

    If you’ve previously enrolled a device in Duo, you may receive a prompt asking you to use your currently enrolled MFA device(s) to access this page. If none of your second factor devices are available, please contact the UVM Tech Team.

  2. Click Activate/Manage Duo Security.
    1
  3. Click Add Device.
    screen-shot-2016-10-14-at-9-04-46-am
  4. Select Landline as the type, enter your phone number (with area code), your phone extension enter a nickname for your phone, then click Add Device.
    You must enter a 10 digit phone number including the area code.



    screen-shot-2016-10-14-at-8-50-54-am

  5. That’s it! You’ve successfully enrolled your Landline phone for use with Duo Security.

Generate Backup Access (Offline) Codes

Off-line passcodes are to be used when you need to provide an additional authentication factor but are unable to use other methods.

  1. Visit https://account.uvm.edu/multifactor and enter your UVM NetID and password, if prompted.

    If you’ve previously enrolled a device in Duo, you may receive a prompt asking you to use your currently enrolled MFA device(s) to access this page. If none of your second factor devices are available, please contact the UVM Tech Team.

  2. Click Activate/Manage Duo Security.
    1
  3. Click Generate Offline Codes.
    codes_arrow
  4. Print out this list of codes and keep it in a safe place. You should treat these codes as if they were a $100 bill. Codes must be used in the order they are listed. Once you’ve used a code it will no longer work, cross out any used codes to help keep track of which have been used.
    code_list

Request a USB YubiKey

A YubiKey is a small device that resembles a USB flash drive, plugged into the computer you are using to access a Duo protected service. Pressing the button on the key provides the second factor to the service allowing you access.

Available By Request

To request a YubiKey, contact Identity and Account Management by emailing iam@uvm.edu or calling (802) 656-2006. Click here for contact information.

There is a $40 one-time-fee to your department for each YubiKey.


Re-Enroll in Duo with a New Device or Number

If your UVM account is already protected by Duo, but you get a new phone or number, you will have to remove and re-add your device in the Duo Security Enrollment page. Because this page is protected by Duo, and you may no longer have your Duo device, this section describes how to proceed through some common scenarios

Did you get a new phone, but still have your old number?
Use the instructions below for Login using Duo SMS text messages or Login using a phone call, then remove your old device and enroll your new device as outlined above.
Do you still have the old phone?
If you still have your old, Duo-enabled device, you can Push to it or use the instructions below for Login with Duo Mobile generated codes, then remove your old device and enroll your new device as outlined above.
Do you have another device enrolled in UVM's Duo Security?
Log in using the other enrolled device, then remove your old device and enroll your new device as outlined above
Do you have Backup Access (Offline) Codes?
Use the instructions for Login using Backup Access (Offline) codes found below, then remove your old device and enroll your new device as outlined above.
New phone and number, and no other devices enrolled in UVM's Duo Security?
You will need to contact Identity and Account Management by emailing iam@uvm.edu or calling (802) 656-2006. Click here for contact information.

Login using Duo MFA Options

You will not be able to log into Duo-protected services without a Duo-enrolled device

Please see the sections above for enrolling a device in Duo MFA. 

Login using Push Notifications

  1. Enter your UVM NetID and password as normal, then click Login.
    1a
  2. Click Push to receive a (no-cost) push notification on your device.
  3. Open the Duo Mobile app on your device, then tap Request Waiting. Tap to Respond… toward the top of the screen.
    3a
  4. Tap Approve. You should be logged into the Duo-protected service after a few moments.
    4a

Not receiving the push notification?

Please ensure you are connected to a wireless network and have a good wifi signal.

If you do not approve the Duo push notification within 20 seconds, the notification will expire and you will have to re-send the push notificaton.

Login with Duo Mobile Generated Codes

  1. Enter your UVM NetID and password as normal, then click Login.1a
  2. In the Duo Mobile app on your smart phone or tablet, tap on University of Vermont to view a six-digit passcode.
  3. Enter the passcode generated by your Duo Mobile app in the Passcode field, then press the Enter key.

Login using Duo SMS Text Messages

Open a web browser and navigate to a UVM web service protected by Duo multi factor authentication. In this example, we’ll be logging into PeopleSoft.

  1. Enter your UVM NetID and password as normal, then click Login.
    1a
  2. Click Text. You should only need to click this option once.
    getTexted

    Not seeing the Text option

    Click the I Can’t Push to this device checkbox to see additional, non-push options.

  3. You will receive an SMS text message with a list of codes.
    Not receiving the codes?

    If it has been more than a minute and you still have not received a text with your SMS passcodes, please ensure you have good cell service and can otherwise receive text messages.
    Avoid clicking the Text option again – this will generate a new set of passcodes, rendering previous passcodes invalid.



    codeText

    Codes can only be used once

    You will received 10 SMS passcodes separated by a space. Please keep track of which codes you have used – they can only be used once.

  4. Enter one of the codes into the Passcode field, then press the Enter key.

SMS Code Details

  • SMS passcodes can only be used once. 

  • You can use SMS passcodes in any order without invalidating other unused codes.

  • Requesting a new batch of SMS passcodes will invalidate all previous SMS passcodes. Only the most recent passcodes will be usable. 

Login using a Phone Call

  1. Enter your UVM NetID and password as normal, then click Login.
    1a
  2. Click Call under the appropriate device.
    phone
  3. Answer the call on your selected device, then approve the login request by pressing any key on the phone’s number pad. You should now be successfully logged in.

Login using Backup Access (Offline) Codes

  1. Enter your UVM NetID and password as normal, then click Login.
    1a
  2. Enter one of your Backup Access Codes in the Passcode field, then hit the Enter key.

Offline Backup Code Details

  • Offline codes are valid until used once. 
  • You can use your offline codes in any order without invalidating other unused codes.

  • Requesting a new batch of offline codes will invalidate all previous offline codes. Only the most recent passcodes will be usable. 

Login using a USB YubiKey

Don't have a YubiKey

To request a YubiKey, contact Identity and Account Management by emailing iam@uvm.edu or calling (802) 656-2006. Click here for contact information.

There is a $40 one-time-fee to your department for each YubiKey.


  1. Enter your UVM NetID and password as normal, then click Login.1a
  2. Insert your YubiKey into a USB-port, then touch the brass contact.
    yubi-touch
  3. Your YubiKey will automatically insert a string of characters which will serve as the second-factor for accessing the Duo protected service you’re logging into. You should then be successfully logged in.
    code1

Updated on September 11, 2020

Was this article helpful?

Related Articles

Not the solution you were looking for?
Don’t worry we’re here to help!
Submit a Help Ticket