What is Duo?

Duo Multi-Factor Authentication (MFA)

What is Duo and why do we use it?

Duo Multi-Factor Authentication (MFA) adds an extra layer of protection to your account when you access university resources from outside Commonwealth University's trusted network.

MFA helps protect your account even if your password is stolen. Cybercriminals increasingly use phishing emails, fake login pages, password reuse attacks, and data breaches to gain access to accounts. With MFA enabled, a stolen password alone is not enough to sign in.

MFA protects:

  • Your personal information
  • University systems and data
  • Your email account from being used to impersonate you

A Quick Security Reminder

Information Technology (IT) will never ask for your password or your six-digit Duo verification code.

If anyone asks for your password or a Duo code, assume it is a scam.

If you unexpectedly receive a Duo approval request that you did not initiate:

  • Do not approve it
  • Deny the request if prompted
  • Change your password immediately at https://password.commonwealthu.edu
  • Contact the Technology Help Desk

Repeated or unexpected Duo requests may indicate that your password has been compromised.

In some situations, compromised accounts may also be identified by Microsoft 365 as high-risk accounts, which can result in additional access restrictions until the account is secured.

Enrolling in Duo

Getting Started

Enroll or manage your devices through the Duo Management Portal.

Recommended Option: Duo Mobile App

If you have a smartphone, we strongly recommend installing the Duo Mobile app and using Duo Push notifications. This is the easiest and most secure authentication method.

During enrollment:

  1. Open the Duo Management Portal on your smartphone or computer.
  2. Follow the prompts to add your device.
  3. Install the Duo Mobile app when prompted.
  4. Complete activation.

Other Options

If you do not have a smartphone, you can use:

  • A basic cell phone for text message passcodes
  • A landline phone for voice-call verification
  • A Duo hardware token available through the Technology Help Desk

Do I Need to Enroll?

You only need Duo if you access Duo-protected resources from outside the university's trusted network.

However, enrolling in advance is recommended so you are prepared if remote access becomes necessary.

What Changes When I Sign In?

When accessing a Duo-protected service from outside the university network:

  1. Enter your username and password as usual.
  2. Verify your identity using your selected Duo method.
  3. Access is granted after successful verification.

Verification methods include:

  • Duo Push notification
  • Passcode from the Duo Mobile app
  • Text-message passcode
  • Phone call verification
  • Hardware token passcode

Most users find Duo Push to be the fastest and easiest option.

Traveling Internationally

If you plan to travel outside the United States, make sure you can still complete Duo authentication.

If You Have Your Enrolled Device

You can continue using Duo Push when connected to:

  • Wi-Fi
  • Cellular data service

No Internet Access?

The Duo Mobile app can generate passcodes even when your device is offline.

Traveling Without Your Enrolled Device?

Before you leave, obtain a Duo hardware token from the Technology Help Desk. This will allow you to generate passcodes without a phone or internet connection.

Additional Authentication Options

Depending on your enrolled devices, Duo supports:

  • Duo Push notifications
  • One-time passcodes
  • Text-message codes
  • Voice calls
  • Hardware tokens

Most web applications will allow you to choose your preferred authentication method during sign-in.

For convenience, many browser-based applications also offer a "Remember me for 30 days" option, reducing the number of authentication prompts on personal devices.

Learn More

Written Guide

Short Videos

 

Print Article