Using 2FA on Your Device

After you’ve enrolled in 2FA, then what happens? The following information explains the options you have for verifying your identity when you log in to protected systems. Options vary based on the devices (cell phone, desk phone, token, etc.) you have enrolled in 2FA.

Smartphone

A smartphone provides the greatest number of authentication options.

  • Duo Push: After the Duo Mobile app is installed and active, you can choose the Duo push option to authenticate by tapping on an “approve” button on your phone. Duo Push requires an Internet connection.
  • Passcode: After the Duo Mobile app is installed and active, tap the green key button to receive a 6-digit passcode. On the 2FA login page, type the 6 digits into the “Passcode” field and hit “Log In.” This option is similar to using a hardware token and will work even without an Internet connection and/or cellular service.
  • Phone call: You can choose to have Duo Security call your smartphone so you can follow the simple phone prompts to authenticate.
  • Text passcodes: You can choose the “text passcodes” option at the 2FA screen so that a text message will be sent to your phone with 5 one-time use passcodes. Each time you need to authenticate, you enter one of the 6-digit codes into the passcode field on the 2FA screen. When you have used the 5 passcodes, you can request to receive 5 more.

Cell phone

A cell phone that does not allow you to download and install apps has two authentication options:

  • Phone call: You can choose to have Duo Security call your mobile phone so you can follow the simple phone prompts to authenticate.
  • Text passcodes: You can choose the “text passcodes” option at the 2FA screen so that a text message will be sent to your phone with 5 one-time use passcodes. Each time you need to authenticate, you enter one of the 6-digit codes into the passcode field on the 2FA screen. When you have used the 5 passcodes, you can request to receive 5 more.

Tablet

A tablet with the Duo Mobile app installed and active provides some of the same authentication options as a smartphone.

  • Duo Push: After the Duo Mobile app is installed and active, you can choose the Duo push option to authenticate by tapping on an “approve” button on your phone. Duo Push requires an Internet connection.
  • Passcode: After the Duo Mobile app is installed and active, tap the green key button to receive a 6-digit passcode. On the 2FA login page, type the 6 digits into the “Passcode” field and hit “Log In.” This option is similar to using a hardware token and will work even without an Internet connection and/or cellular service.

Landline Phone

A landline will work for 2FA; however, because of the stationary nature of the phone, it is strongly recommended that you enroll more than just one landline in the service. Even two landlines (one at home and one at the office) is better than just a single landline.

  • Phone call: You can choose to have Duo Security call your landline phone so you can follow the simple phone prompts to authenticate.

Token

 Only a Duo Token will work with 2FA. Other tokens (such as Vasco tokens) will not work with 2FA.

  • Passcode: You can generate a passcode by tapping the button on the token and then entering the auto-generated number in the passcode box on the 2FA login screen.

If you receive an error message that says “Incorrect passcode. Please try again.” after entering the passcode displayed on your token:

  • Your token may be out of sync.  Common ways this can happen:
    • The token has not been not used for over a month
    • The button has been pressed repeatedly and the codes were not used (as might happen if you keep it in your pocket or on a keyring)
    • The token is upside down (make sure the green button is on the left and the word "DUO" is at the top)
  • To fix this issue:
    • Attempt to log in three times in a row, entering a new code each time. This will resync your DUO token to the servers.
    • If this method of resyncing does not work, contact the IT Service Center at (937)229-3888 and they will resync your token.

Related Links

Contact Us

Information Technologies (UDit)

300 College Park 
Dayton, Ohio 45469 

937-229-3888