Two-factor authentication provides a second layer of security to any type of login, requiring extra information or a physical device to log in, in addition to your password. By requiring two different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords.
Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords. Two-factor authentication enhances the security of your account by using a secondary device to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.
Duo Security is a company that provides a cloud-based software service that utilizes two-factor authentication to ensure secure access to services and data.
When logging in to an application that is protected by Duo Security, such as Workday, you will continue to enter your username and password. After inputting your login information, you will be required to complete a method of second-factor authentication. Duo Security does not replace or require you to change your username and password.
Duo allows you to remember a device for 15 days. You can approve any computer that you commonly use and will not be required to provide two-factor authentication confirmation for 15 days. For example, if you have a desktop and a laptop, you can approve both computers as trusted devices.
Yes. Multiple devices and phone numbers can be listed. When authenticating choose the specific device you wish to use to authenticate. Having more than one device is recommended. You may register as many devices as you wish. If you need to register another device once you have completed the initial enrollment process, you may do so from the Duo self-service portal.
Please use the following definitions regarding Duo device enrollment:
You are encouraged to set up Duo on more than one phone (such as your desk phone) in case you forget a phone at home.
You have four options
The “Remember me for 15 days” is browser specific. If you logged in using IE this morning and are now using Firefox, it will ask you to authenticate again. If you are using the same browser as this morning and you are prompted to authenticate again, it could be due to the cookie not being saved. If you have “Private Browsing” mode turned on or have disabled cookies, the Duo login will appear every time.
You can find more information here.
Sometimes the Duo mobile app will not launch as intended on your smartphone. Usually, a simple reboot of your phone will resolve the issue. If you don’t wish to reboot your smartphone, you could manually launch the Duo app. Your notification should be there waiting for your approval.
Changes to your account must be done from within a fresh browser session. This can be done by using another web browser or a Private/Incognito window. (find out if DUO has a page for updating/adding etc…)
If you opt-out of the DUO mobile application push notifications, there are a variety of passcode options to utilize as your second verification method.