Which Duo Security features are used by MIT?

Answer

MIT uses Duo Security's Two-factor Authentication Service, with the optional trusted devices feature enabled. The trusted devices feature allows you to set a browser cookie via the "remember me for 30 days" checkbox, to prevent having to re-authenticate with Duo from that browser within that time period. You can choose not to use the trusted devices feature.

Installing the Duo Security application on your personal mobile device does not grant MIT control of your device. MIT is not running Endpoint Visibility and Remediation, Enrollment Policies, or any other endpoint inspection or management solutions offered by Duo Security, and there are no plans to turn these on.

If you do not want to install the Duo app on your smartphone, do not have a smartphone, do not want to use your phone for your second authentication factor, or if you want a backup option, you can request a USB hardware token (YubiKey) to generate one time passcodes for use with Duo.