Duo Device Health

The Duo Device Health Application is an application installed on your desktop or laptop that performs health checks whenever you access Duo protected applications through the browser-based Duo Universal Prompt or traditional Duo Prompt, ensuring that your computer meets the organization’s security requirements. This helps protect corporate data and make sure your computer is less vulnerable to compromise.

Has your organization enabled the new Universal Prompt experience? See the Universal Prompt guide for more information.

Vulnerable laptops or desktops accessing corporate resources exposes organizations to potential attacks, financial damage and compliance issues. The Duo Device Health Application reduces risk by ensuring compliance of corporate devices to business standards and provides visibility into personal devices before granting them access to corporate resources.

Duo Device Health supports the following platforms:

• Windows 10 and 11 client editions, including Enterprise, Pro, and Home.
• macOS 10.13 and later.

Duo Device Health application does not support Windows Server, earlier versions of Windows, or macOS beta versions.

Install Duo Device Health

Duo Device Health app takes up very little space and will not slow your system or other apps down. It does not erase data, access your personal files, or change your computer settings. Learn what data the Duo Device Health app collects.

Duo Device Health app installation requires that you have administrator privileges on your computer. If you do not have administrative rights on your computer or encounter issues installing Duo Device Health, please contact your organization's Duo administrator or Help Desk.

The steps for downloading and installing Duo Device Health for the first time during Duo enrollment or authentication differ slightly between the Duo traditional prompt and the Duo Universal Prompt.

If your browser prompts you to allow it to open Duo Device Health app, be sure to grant that permission and to save that setting for the future.

Download and Install During Enrollment

Your organization may have enabled an option to offer Duo Device Health installation when you complete first-time enrollment in the Duo traditional prompt or Duo Universal Prompt.

It's a good idea to go ahead and install Duo Device Health during enrollment so you don't risk having your application login delayed or blocked in the future.

Install during Duo traditional prompt enrollment

1. When you begin Duo enrollment, either from an emailed enrollment link, an enrollment portal for your organization, or when you log into a Duo-protected application, you'll see a download button within the Duo Prompt. Click it to download the Duo Device Health app installer.



2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a DMG file.
3. Run the Duo Device Health app installer, following the on-screen prompts.
4. Once the Duo Device Health install completes, return to the Duo Prompt and click the Continue button to proceed with enrolling your two-factor authentication device.

Install during Duo Universal Prompt enrollment

1. When you begin Duo enrollment, either from an emailed enrollment link, an enrollment portal for your organization, or when you log into a Duo-protected application, you'll see a download button within the Duo Universal Prompt. Click it to download the Duo Device Health app installer.



2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a DMG file.
3. Run the Duo Device Health app installer, following the on-screen prompts.
4. Once the Duo Device Health install completes, return to the Duo Prompt in your browser. It should proceed to two-factor authentication device enrollment. If the Duo Device Health app didn't launch automatically after you installed it, click Open the app.

Download and Install During Login

Install during Duo traditional prompt authentication

1. When you log in to an application that is protected by Duo, and for which your organization's Duo policy requires the Duo Device Health app, you'll see a download button within the Duo Prompt. Click it to download the Duo Device Health app installer.



2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a DMG file.
3. Run the Duo Device Health app installer, following the on-screen prompts.
4. Once the Duo Device Health install completes, return to the Duo Prompt and click the link to continue with enrolling your two-factor authentication device.

Install during Duo Universal Prompt authentication

1. When you log in to an application that is protected by Duo, and for which your organization's Duo policy requires the Duo Device Health app, you'll see a download button within the Duo Prompt. Click it to download the Duo Device Health app installer.
   
2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a DMG file.
3. Run the Duo Device Health app installer, following the on-screen prompts.
4. Once the Duo Device Health install completes, return to the Duo Universal Prompt to continue logging in to the application. If the Duo Device Health app didn't launch automatically after you installed it, click Open the app.
   

Start Duo Device Health

The Duo Device Health app should start automatically after installation, but can also be started manually if needed:

macOS

1. Open Spotlight with Command key ⌘ + Space bar.
2. Type Duo Device Health and click the application search result.

Windows 10

1. Open the Start Menu with Windows key ⊞ key or click the Windows logo on the far left of the taskbar.
2. Type DuoDeviceHealth and click the application search result.

Other Install Methods

If your organization manages your computer, your IT team may push the Duo Device Health app to your computer automatically, without you needing to perform the install steps.

Your Duo administrator might also ask you to install the Duo Device Health app ahead of time. You can download the installers directly with these links:

• macOS
• Windows 10

View checksums for Duo downloads.

Duo Device Health App Updates

Keep the Duo Device Health app up to date. You'll be notified when a newer version of the app becomes available. Follow the on-screen instructions to install the update.

---

Log in with Duo Device Health

When you enter username and password into a Duo protected application, the Duo Device Health application checks the health of your device before you are able to access the application. This should only take a few seconds.

Once the health check completes you may choose an authentication method to verify your identity and log in to the application.

Duo Traditional Prompt

Duo Universal Prompt

---

Fix Duo Device Health Issues

If the Duo Device Health check determines that your computer doesn't meet the security requirements for your organization, then you can't access the protected application and you'll see a notification in the Duo Prompt. Clicking the link in the notification opens the Duo Device Health app, which shows you what you need to address on your computer before you can access the application.

Click on the setting that needs action to see instructions for how to correct it so your device is healthy. If you need help, your Duo administrator may have added contact information to the Duo Device Health app, or you should contact your organization's help desk.

Duo Traditional Prompt

Duo Universal Prompt