Access Keys:
Skip to content (Access Key - 0)

Duo Authentication Landing Page

On this page:

About Duo Two-factor Authentication

What is Duo?

Duo is a two-factor authentication system that requires both a credential (certificate, username/password) and a registered thing you have (smart phone, tablet, yubikey) to "Approve" system access to applications that require Touchstone Authentication.

By default, every time a website prompts you to login via Touchstone, you will get a Duo prompt to approve the login. This is usually once per day, or whenever you restart your web browser. If you prefer to be prompted less frequently, the Duo login page has a "Remember this device" checkbox. If this option is selected, you will not be prompted again for 30 days. For more information, see: Duo Remember My Device for 30 Days FAQ.

Who is required to use Duo?

As of June 15, 2016 Duo is required for the entire MIT community including students, faculty, staff and affiliates.

What devices can I use with Duo?

Do I need a smartphone with a data plan? No.

There are several ways you can authenticate via Duo. No smartphone or data plan is required. IS&T recommends setting up at least two in case your registered device is lost or stolen.

  • A push notification sent to your smart phone or tablet with the free, IS&T Recommended Duo Security Mobile app (available for iOS, Android, BlackBerry and Windows Phone).
  • An SMS message sent to your cell phone (not supported with some international numbers)
  • A phone call made to your cell phone
  • A phone call made to a landline
  • By entering a one-time code generated by the Duo Mobile app (Android or iOS or a YubiKey. )
    Good for traveling or when cell coverage is poor.

What services use Duo authentication?

Services that use Touchstone. These include:

Registering Devices

In order to leverage Duo's two-factor authentication system, you must first register your device(s) with MIT Duo at https://duo.mit.edu.

IS&T recommends registering at least two (2) devices. In case your device is lost or stolen, the second device will allow you to login to Duo, deactivate the lost device, and configure the replacement.

Authenticating

Using Two Factor Authentication

Traveling with Duo

Before you travel, it's important to think about how you'll use Duo on the road. If your smartphone won't work where you're going, you may want to request a yubikey or install the IS&T Recommended Duo Security Mobile app (available for iOS, Android, BlackBerry and Windows Phone). so you can generate a one-time passcode.

Lost/Stolen Device or Changed Phone Number

What should I do if my Duo registered device is lost, stolen or I change my phone number?

You should immediately deactivate the device. If you have another registered device, use that to login to https://duo.mit.edu, deactivate the lost/stolen/changed device, and register the replacement.

If your only Duo-registered device is lost/stolen or you have changed phone numbers, you will need to contact IS&T to verify your identity and get your account reset. See: Get Help.

Troubleshooting

Frequently Asked Questions

Get Help

For additional assistance with Duo, troubleshooting, lost/stolen devices, or any other Duo issues, contact the Service Desk.

Account resets for lost/stolen devices or changed phone numbers require identity verification. You will need to bring or provide proof via a valid photo ID (MIT ID, government issued ID card, driver's license, passport, etc).

Additional escalation information for Help Staff can be found here: [hd:Duo Authentication Recon].

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

February 26, 2017

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
c-duo c-duo Delete
authorization authorization Delete
authentication authentication Delete
two-factor two-factor Delete
yubikey yubikey Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki