Multi-Factor Authentication & Single Sign-On Duo Security

If you already use Duo on another device with your Google Account, sign in with the same account to finish setup. If you’re using your Chromebook at work or school, you might not be able to use the Duo app.

They now have the location of the bad actor and can immediately report the malicious behavior to their company’s administration.
It’s fast and easy to log in securely with Duo Push, the more secure method of two-factor authentication supported by Duo Mobile.
To proceed with adding your initial Duo account to Duo Mobile, tap Use a QR code.
If your phone is running Android 13 or later, you may need to enable Duo Push notifications.

Duo has been upgraded to Meet as your one app for video calling and meetings. The Duo Mobile App helps users take an active role in protecting their accounts. Enter a new name for the account and then tap Save to apply the new name. Tap on any detected issue to learn more about that particular setting and how you can update your device with the recommended configuration. If your phone is running Android 13 or later, you may need to enable Duo Push notifications.

See All Duo Documentation

We help keep companies safer than ever before with minimal downtime and optimized productivity. By providing a security score of users’ devices, Security Checkup empowers users to maintain the security hygiene of their mobile devices via Duo Mobile notifications. This feature is available on iOS and Android through Duo Mobile.

Only Duo delivers peace of mind with strong security and increased productivity at an unmatched value.
Like MFA, there are multiple ways to verify with 2FA (push notifications, biometrics, location, etc.) 2FA is often used in authenticator apps as well.
Tap Move to reorder your accounts list (shown when you have more than one account in Duo Mobile).
This protects you from approving login requests not made by you and helps keep your accounts and information safe.

There are multiple ways to verify with MFA (push notifications, biometrics, location, etc.). MFA is often used in authenticator apps to support other factors of verification, or by itself. In short, MFA is simply 2 or more verification methods added to a password or pin. Duo Mobile supports multiple authentication controls — from push notifications, to biometrics, to passcodes — while maintaining a consistent, intuitive user login experience. Allow your users to choose the method that best meets their needs and easily update their preferences at any time. A 2FA mobile app is a smartphone application that helps users log on to other apps with more security.

Easy, Flexible Cybersecurity Solutions for Everyone

To use Google Duo with the Contacts app, make sure you have version 2.1 and up. To use Google Duo with the Phone app, make sure you have version 13.0 and up. Google Duo calls any Google Home device you’re signed in to, like Smart Displays with Google Assistant. Make sure you have the latest version of the Duo app and Android 7.0 and up. Download your copy of our latest eBook to learn how you can combine MFA and SSO into a cohesive solution that’s an essential part of a zero trust environment that enhances business resilience. You can add or remove your Google Account from Duo at any time.

To enable a second notification, warning when there are e.g. 10 seconds to verify before it the request is dropped.
For instance, some 2FA apps require users to verify their identities with their fingerprints, or biometrics.
Encrypting with your own password is the most secure option.
Streamline user authentication for an uninterrupted access experience for your workforce.
From compliance to planning for security’s future, Duo has the access and authentication tools to help you get where you need to be.
If you rotate your device into a landscape view, your Duo Mobile accounts list rotates as well.

This can happen because some Android device manufacturers will set a default password to encrypt the phone. Although your phone might say it’s encrypted, technically it isn’t fully encrypted until you set your own PIN/password/pattern at startup via your phone’s settings. Encrypting with your own password is the most secure option.

Rename a group, add members, reset a group link, or leave a group

Your organization may wish for you to enter a verification code shown within the Duo Universal Prompt into Duo Mobile when you approve a Duo Push request. This protects you from approving login requests not made by you and helps keep your accounts and information safe. Duo Mobile works on all the devices your users love — like Apple and Android phones and tablets, as well as many smart watches. Duo Mobile also supports biometric authentication, an additional layer of security to verify your users’ identities. If you receive a Duo Push request on your phone and you aren’t trying to log in to that application tap I’m not logging in to deny the request.

Download Duo Mobile for iPhone or Duo Mobile for Android – they both support Duo Push, passcodes and third-party TOTP accounts.
Now you’re able to respond to Duo Push authentication requests, or generate passcodes to log in to applications.
To see which version of Duo Mobile is installed on your device, go to the Android Settings menu, tap Apps, then scroll down and tap Duo Mobile.
If you choose to authenticate with Duo Push, you’ll get a login request sent to your phone — just press Approve to authenticate.

Quickly and securely verify user trust with every access attempt. Download Duo Mobile for iPhone or Duo Mobile for Android – they both support Duo Push, passcodes and third-party TOTP accounts. Duo Mobile’s Security Checkup verifies device settings against Duo’s recommended security settings, and lets you know if any of your device’s settings don’t match.

Getting Started with Duo

Now you’re able to respond to Duo Push authentication requests, or generate passcodes to log in to applications. Duo Mobile can also generate time-based one-time (TOTP) passcodes that users can type into their login prompt to complete the two-factor authentication process. Duo Mobile also supports fingerprint verification for Duo Push-based logins as an additional layer of security to verify your user identity. If you’re using a device with a fingerprint reader you’ll need to scan your finger each time you authenticate via Duo Mobile (if required by your administrator). From an end user standpoint, using a 2FA mobile application is a simple but important part of securely accessing data.

A 2FA mobile app is a smartphone application that helps users log on to other apps with more security.
Tapping on the push request notification itself (instead of tapping the notification actions) takes you to the full Duo Push screen in Duo Mobile.
Duo Mobile also supports fingerprint verification for Duo Push-based logins as an additional layer of security to verify your user identity.
Two-factor authentication is a type of tool used to verify an online user’s identity.
If the new account you want to add shows you a QR code to scan with an authenticator app, tap Use QR code from the Add account list.

If that same user receives a Duo Mobile notification to verify a Salesforce login when they have made no login attempt themselves, they know that a bad actor is trying to access their data. When they open the 2FA app to view the notification, they then see that the login attempt came from Kraków, Poland. They now have the location of the bad actor and can immediately report the malicious behavior to their company’s administration. If you still experience issues with the Disk Encryption error displaying in Duo Mobile, even after completing the steps above, try to disable this setting and then re-enable it again.

Install Duo Mobile

If you rotate your device into a landscape view, your Duo Mobile accounts list rotates as well. When you delete an account you can no longer use it to log in, and it’s also removed from your Duo Mobile backup so you can’t restore it <--more--> later. If you’re sure you want to remove this account, tap Delete on the confirmation message. If the new account you want to add shows you a QR code to scan with an authenticator app, tap Use QR code from the Add account list.

You can also perform third-party account recovery if you previously opted-in to third-party account restore.
If you get a login request that you weren’t expecting, press Deny to reject the request.
To make changes to an account in your accounts list, tap the account to expand it, and then tap the three dots in the upper-right corner of the account card to bring up the account options.
Cyber attackers are increasingly targeting gaps in weaker multi-factor authentication (MFA) implementations.
Duo Mobile works on all the devices your users love — like Apple and Android phones and tablets, as well as many smart watches.

This feature allows Android and iOS Duo Mobile users to back up their Duo-protected accounts and recover them when they get a new device — no help desk ticket needed. Tap Move to reorder your accounts list (shown when you have more than one account in Duo Mobile). Use the up or down arrows shown to the left of each account’s name (or tap and hold the icon on the right side of the account card) to change an account’s position in the list. To make changes best phone thermometer app to an account in your accounts list, tap the account to expand it, and then tap the three dots in the upper-right corner of the account card to bring up the account options. This works anywhere, even in places where you don’t have an internet connection or can’t get cell service. If your organization requires Duo Push verification, Duo Universal Prompt displays a six-digit code on-screen when you choose to use Duo Push to log in to that application.

Awesome easy simple app

When you enroll in Duo for the first time and choose to add an Android device or use Duo Push, you’re shown a QR code to scan with the Duo Mobile app to complete activation. Cyber attackers are increasingly targeting gaps in weaker multi-factor authentication (MFA) implementations. Only Duo delivers peace of mind with strong security and increased productivity at an unmatched value. Duo’s multi-factor authentication (MFA), single sign-on (SSO), remote access and access control products deploy fast in any environment.

Scan the QR code with your camera to add the account to Duo Mobile.
Use your camera to scan the QR code shown by Duo Enrollment in your browser.
It’s a good idea to take a few minutes to practice approving and denying Duo authentication requests if you haven’t used Duo before.
If your device has the system-wide dark setting enabled, Duo Mobile automatically switches to dark theme.

From compliance to planning for security’s future, Duo has the access and authentication tools to help you get where you need to be. The developer, Duo Security LLC, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy. To use Google Duo with the Messages app, make sure you have version 2.6 and up.

Simple, quick, painless, just one suggestion 🙂

After a 2FA app has been properly installed onto a user’s device, be it a personal device or company-managed device, they then can enroll their individual logins in the service. You can also perform third-party account recovery if you previously opted-in to third-party account restore. Start the account recovery process by tapping I have existing accounts on the Duo Mobile welcome screen.

When they open the 2FA app to view the notification, they then see that the login attempt came from Kraków, Poland.
Some 2FA apps, like Duo Mobile, combine location-based identity verification with push verification, sending users a reading of their location and the option to tap the screen to confirm.
MFA is often used in authenticator apps to support other factors of verification, or by itself.
The Duo Mobile App helps users take an active role in protecting their accounts.

Tap Yes to notify your organization’s Duo administrator or tap No if you made a mistake or the login isn’t suspicious. Tapping on the push request notification itself (instead of tapping the notification actions) takes you to the full Duo Push screen in Duo Mobile. If you get a login request that you weren’t expecting, press Deny to reject the request. If you aren’t trying to log into an application or service protected by Duo and don’t recognize the request, tap Yes to notify your organization’s Duo administrator.

Solutions for Every Security Goal

Scan the QR code with your camera to add the account to Duo Mobile. If the account is for a Duo-protected service or application (meaning you enrolled this device into Duo and activated the app for Duo Push), then the passcode shown is valid until used. Provide your users with the ability to back up and restore their Duo Mobile app with Duo Restore.

Tap on any detected issue to learn more about that particular setting and how you can update your device with the recommended configuration.
Provide simpler, safer access with just one username and password.
All this said, 2FA is actually a type of MFA, but instead of using multiple factors of verification, 2FA only refers to MFA that uses single verification method added to a password or pin.
Duo Mobile’s dark theme depends on your Android system settings.
This works anywhere, even in places where you don’t have an internet connection or can’t get cell service.

If you made a mistake or the login isn’t suspicious, tap No to deny the request without reporting it. To add additional accounts to Duo mobile, tap Add in the upper right of your accounts list to go to the account type selector. If you’re not able to scan your fingerprint using the sensor you can also approve the Duo authentication request using the device’s passcode (the same one you use on the Android lock screen). It’s a good idea to take a few minutes to practice approving and denying Duo authentication requests if you haven’t used Duo before. Tap Practice now to go through some training screens like this one.

A App Prevents Malicious Access

To proceed with adding your initial Duo account to Duo Mobile, tap Use a QR code. To enable a second notification, warning when there are e.g. 10 seconds to verify before it the request is dropped. Streamline user authentication for an uninterrupted access experience for your workforce. Follow Duo’s journey in bringing this new capability to market by clicking below. Provide simpler, safer access with just one username and password.

If you’re prompted to allow Duo Mobile permission to take pictures and record video, please grant it.
If that same user receives a Duo Mobile notification to verify a Salesforce login when they have made no login attempt themselves, they know that a bad actor is trying to access their data.
This can happen because some Android device manufacturers will set a default password to encrypt the phone.
Here’s your chance to secure all of your critical attack vectors — email, web traffic and credential theft.

Tap Approve in the notification to finish logging in to the Duo-protected application. Use your camera to scan the QR code shown by Duo Enrollment in your browser. If you’re prompted to allow Duo Mobile permission to take pictures thermometer weather app and record video, please grant it. We’re always working to improve user experience in Duo Mobile. This update introduces various behind-the-scenes improvements and minor bug fixes to enhance your authentication experience.