Access Keys:
Skip to content (Access Key - 0)

Duo Authentication Landing Page

Touchstone and Duo updated March 22
Touchstone and Duo authentication has been updated with some visual changes and an improved two-factor authentication experience as Information Systems and Technology (IS&T) implemented updates to the Institute's single sign-on web authentication service on Friday, March 22.
For more information on securing your data, see Information Protection @ MIT.

On this page:

Overview

Duo is a two-factor authentication system that requires both a credential (certificate, username/password) and a registered thing you have (smart phone, tablet, yubikey) to "Approve" system access to applications that require Touchstone Authentication.

By default, every time a website prompts you to login via Touchstone, you will get a Duo prompt to approve the login. This is usually once per day, or whenever you restart your web browser. If you prefer to be prompted less frequently, the Duo login page has a "Remember this device" checkbox. If this option is selected, you will not be prompted again for 30 days. For more information, see: Duo Remember My Device for 30 Days FAQ.

How to Obtain

Registering Devices

In order to leverage Duo's two-factor authentication system, you must first register your device(s) with MIT Duo at https://duo.mit.edu.

IS&T recommends registering at least two (2) devices. In case your device is lost or stolen, the second device will allow you to login to Duo, deactivate the lost device, and configure the replacement.

How to Use

Who is required to use Duo?

Duo is required for the entire MIT community including students, faculty, staff and affiliates.

What devices can I use with Duo?

There are several ways you can authenticate via Duo. No smartphone or data plan is required. IS&T recommends setting up at least two in case your registered device is lost or stolen.

  • A push notification sent to your smart phone or tablet with the free, IS&T Recommended Duo Security Mobile app (available for iOS and Android).
  • An SMS message sent to your cell phone (not supported with some international numbers)
  • A phone call made to your cell phone
  • A phone call made to a landline
  • By entering a one-time code generated by a YubiKey.
    Good for traveling or when cell coverage is poor.

What services use Duo authentication?

Services that use Touchstone. These include:

Authenticating

Using Two Factor Authentication

Traveling with Duo

Before you travel, it's important to think about how you'll use Duo on the road. If your smartphone won't work where you're going, you may want to request a yubikey or install the IS&T Recommended Duo Security Mobile app (available for iOS and Android) so you can use push authentication with the app.

Lost/Stolen Device or Changed Phone Number

What should I do if my Duo registered device is lost, stolen or I change my phone number?

You should immediately deactivate the device. If you have another registered device, use that to login to https://duo.mit.edu, deactivate the lost/stolen/changed device, and register the replacement.

If your only Duo-registered device is lost/stolen or you have changed phone numbers, you will need to contact IS&T to verify your identity and get your account reset. See: Get Help.

Troubleshooting

FAQ's

Get Help

For additional assistance with Duo, troubleshooting, lost/stolen devices, or any other Duo issues, contact the Service Desk.

Account resets for lost/stolen devices or changed phone numbers require identity verification. You will need to bring or provide proof via a valid photo ID (MIT ID, government issued ID card, driver's license, passport, etc).

Additional escalation information for Help Staff can be found here: [hd:Duo Authentication Recon].

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

March 25, 2024

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
c-duo c-duo Delete
authorization authorization Delete
authentication authentication Delete
two-factor two-factor Delete
yubikey yubikey Delete
infoprotect infoprotect Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki