What is Duo?
Duo is a security solution that gives you a second layer of protection by confirming that you’re really who you say you are before you can access your accounts. With Duo’s two-factor authentication, even if someone knows your password, unless they also have your mobile phone, tablet, or USB security key - Duo prevents them from accessing your account.
What is 2FA (Two-Factor Authentication)?
2FA, or Two-factor authentication, is an additional layer of authentication beyond a username and password. 2FA involves something you know (password) plus something you have with you (like Duo Mobile on your smartphone) to prevent someone from logging in with only your password. With Duo 2FA, you still enter your username and password. The second factor provided by Duo is simply an added layer of security on top of your existing credentials. We recommend using Duo Push via the Duo Mobile app to perform 2FA.
How does 2FA work?
By adding one more simple step when logging into an account, Two-factor authentication greatly increases the security of your account. Here’s how it works. Just like logging into your account, the first step is giving your password or passphrase. The second step is to provide an extra way of proving that you’re you, like entering a PIN code or texting/emailing a code to your mobile device, or accessing an authenticator app.
For NDUS accounts, 2FA can include:
-
An additional code either emailed to an account or texted to a mobile number
-
A biometric identifier like facial recognition or a fingerprint
-
A yes or no button or unique number generated by the Duo Mobile app
-
A secure token, which is a separate piece of hardware (like a key fob that holds information) that verifies a person’s identity with a database or system
Is 2FA the same as MFA?
Multi-Factor Authentication (MFA) is the practice of adding multiple (two or more) identity verification dimensions at login. MFA differs from its two-dimensional counterpart, 2FA, which only involves adding a single verification method.
MFA expands upon the 2FA concept by adding additional identity verification steps and therefore layers of security. The more additional factors you use to verify identity, the safer you, your device, and your data are!
Why does the North Dakota University System use Duo 2FA?
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. 81% of hacking incidents used stolen or weak passwords.
Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you'll be alerted right away (on your phone) if someone is trying to log in as you.
This second factor of authentication is separate and independent from your username and password — Duo never sees your password.
What is a Duo Prompt?
An interactive prompt that lets you choose how to verify your identity each time you log in (e.g. “Duo Push” or “Call Me”) to a web-based application. The Duo Prompt allows you to enroll and authenticate.
What is a Push Notification (Duo Push):
A push notification is an authentication request that is sent to the Duo Mobile App on an enrolled device. Push notifications include information like the geographical location of the access device, IP address of the access device, and the application being accessed so you can verify whether the push is real or fraudulent.
What is a Passcode?
These are numeric codes that can be generated either via the Duo Mobile app, SMS (text message), or a hardware token. Passcodes may be used at any time and are particularly handy for authenticating when your 2FA device doesn't have internet or cellular service.
Do I need a smartphone or data plan to use two-factor authentication?
No. Having a smartphone makes for an easier and more secure experience with Duo Push. However, it is also possible to enroll a non-smartphone mobile device or landline to receive SMS passcodes or phone calls.
What devices are supported?
-
iPhone/iPad: The current version of Duo Mobile supports iOS 14.0 and greater
-
Apple Watch: Requires Duo Mobile 3.8 or later
-
Android: The current version of Duo Mobile supports Android 10 and greater
-
Any cell phone or landline using the Call Me feature
Can Duo see my password?
No. Your password is only verified by NDUS and never sent to Duo. Duo provides only the second factor, using your enrolled device to verify it’s actually you who is logging in.
Why does Duo need access to my smartphone’s camera?
Duo only needs your camera during enrollment to scan an on-screen QR code to verify that your device is really yours.
What happens if I lose my phone, get a new one, or a change my number?
If you've lost your phone, and fear someone might use it to gain access to one of your accounts, contact UND Tech Support immediately to change your password and update your authentication device.
If you have a backup passcode, or another device registered with your Duo account, you can add, remove, or reactivate devices from any Duo prompt screen. More information.
If you don't have a backup passcode or other device enrolled with Duo, UIT will need to manually update the info and enroll/reactivate duo for you. To protect your account and ensure others can't add their own device to your Duo account, you will need to call UIT and verify your ID before we can manually update your information. Call 701.777.2222 24/7 to update your Duo info.
Can I opt-out of using Duo on my UND account?
No. Duo is required for all North Dakota University System accounts across the state.
Which UND systems are protected by Duo?
-
Campus Connection (Campus Solutions)
-
Blackboard (Coming Soon)
-
Device Management Portal
-
Microsoft 365, including email, Office 365 apps, Teams, OneDrive
-
GlobalProtect VPN
-
HRMS Employee Self-Service
-
LiquidFiles Secure File and Message System
-
DocuSign
What other types of accounts offer Two-factor authentication?
Most online services now offer the option to enable 2FA. Any service online that is storing your personal information (especially financial information), or any account that can be compromised and used to trick or defraud someone else should be protected with 2FA. Simply put, use 2FA everywhere!
What happens if I get an unexpected Duo prompt?
Receiving unexpected Duo push notifications or calls may indicate someone else is trying to gain access to your account. If you are not actively trying to log in to a system that requires Duo authentication, DO NOT APPROVE the request, choose DENY, and mark it as fraud.
Marking an authentication request as fraud will send a notification to UIT Cybersecurity, and lock your Duo account for 20 minutes. If you suspect someone is trying to gain access to your account, change your NDUS password immediately by calling 701.777.2222, or wait 20 minutes for your Duo account to unlock, then visit helpdesk.ndus.edu and select Change my password.