Show/hide navigation

Duo Device Health

The Duo Device Health Application is an application installed on your desktop or laptop that performs health checks whenever you access Duo protected applications through the browser-based Duo Universal Prompt or traditional Duo Prompt, ensuring that your computer meets the organization’s security requirements. This helps protect corporate data and make sure your computer is less vulnerable to compromise.

Has your organization enabled the new Universal Prompt experience? See the Universal Prompt guide for more information. Duo Push in Universal Prompt

Vulnerable laptops or desktops accessing corporate resources exposes organizations to potential attacks, financial damage and compliance issues. The Duo Device Health Application reduces risk by ensuring compliance of corporate devices to business standards and provides visibility into personal devices before granting them access to corporate resources.

Duo Device Health supports the following platforms:

  • Linux distributions which support Debian or Red Hat packages.
  • macOS 10.15 and later.
  • Windows 10 and 11 client editions, including Enterprise, Pro, and Home.

Duo Device Health application does not support Windows Server, earlier versions of Windows, or macOS beta versions.

Install Duo Device Health

Duo Device Health app takes up very little space and will not slow your system or other apps down. It does not erase data, access your personal files, or change your computer settings. Learn what data the Duo Device Health app collects.

Duo Device Health app installation requires that you have administrator privileges on your computer. If you do not have administrative rights on your computer or encounter issues installing Duo Device Health, please contact your organization's Duo administrator or Help Desk.

The steps for downloading and installing Duo Device Health for the first time during Duo enrollment or authentication differ slightly between the Duo traditional prompt and the Duo Universal Prompt.

If your browser prompts you to allow it to open Duo Device Health app, be sure to grant that permission and to save that setting for the future.

Download and Install During Enrollment

Your organization may have enabled an option to offer Duo Device Health installation when you complete first-time enrollment in the Duo traditional prompt or Duo Universal Prompt from a macOS or Windows system.

It's a good idea to go ahead and install Duo Device Health during enrollment so you don't risk having your application login delayed or blocked in the future.

Install during Duo traditional prompt enrollment

  1. When you begin Duo enrollment, either from an emailed enrollment link, an enrollment portal for your organization, or when you log into a Duo-protected application, you'll see a download button within the Duo Prompt. Click it to download the Duo Device Health app installer.

    2. Download Duo Device Health from Duo Prompt Enrollment

  2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a PKG file.
  3. Run the Duo Device Health app installer, following the on-screen prompts. You may be prompted to provide an administrator password.
  4. Once the Duo Device Health install completes, return to the Duo Prompt and click the Continue button to proceed with enrolling your two-factor authentication device.

    5. Continue enrollment after Duo Device Health Install

Install during Duo Universal Prompt enrollment

  1. When you begin Duo enrollment, either from an emailed enrollment link, an enrollment portal for your organization, or when you log into a Duo-protected application, you'll see a download button within the Duo Universal Prompt. Click it to download the Duo Device Health app installer.

    2. Download Duo Device Health from Duo Universal Prompt Enrollment

  2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a PKG file.
  3. Run the Duo Device Health app installer, following the on-screen prompts. You may be prompted to provide an administrator password.
  4. Once the Duo Device Health install completes, return to the Duo Prompt in your browser. It should proceed to two-factor authentication device enrollment. If the Duo Device Health app didn't launch automatically after you installed it, click Open the app.

    5. Continue enrollment after Duo Device Health Install

Download and Install During Login

Install during Duo traditional prompt authentication

  1. When you log in to an application that is protected by Duo, and for which your organization's Duo policy requires the Duo Device Health app, you'll see a download button within the Duo Prompt. Click it to download the Duo Device Health app installer.

    If you're using a Linux system, first choose the right type of package for your distribution — either DEB for Debian and Ubuntu or RPM for Red Hat and Centos — and then click to download the installer.

    2. Download Duo Device Health from Duo Prompt

  2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a PKG file. On Linux it will be either a DEB or RPM file depending on which type of package you downloaded.
  3. Run the Duo Device Health app installer, following the on-screen prompts. You may be prompted to provide an administrator password.
  4. Once the Duo Device Health install completes, return to the Duo Prompt and click the link to continue with enrolling your two-factor authentication device.

    5. Continue login after Duo Device Health Install

Install during Duo Universal Prompt authentication

  1. When you log in to an application that is protected by Duo, and for which your organization's Duo policy requires the Duo Device Health app, you'll see a download button within the Duo Prompt. Click it to download the Duo Device Health app installer.

    If you're using a Linux system, first choose the right type of package for your distribution — either DEB for Debian and Ubuntu or RPM for Red Hat and Centos — and then click to download the installer.
    Download Duo Device Health from Duo Universal Prompt
  2. Locate the Duo Device Health application installer in your browser downloads folder. On Windows the installer is an MSI file, and on macOS the installer is a PKG file. On Linux it will be either a DEB or RPM file depending on which type of package you downloaded.
  3. Run the Duo Device Health app installer, following the on-screen prompts. You may be prompted to provide an administrator password.
  4. Once the Duo Device Health install completes, return to the Duo Universal Prompt to continue logging in to the application. If the Duo Device Health app didn't launch automatically after you installed it, click Open the app.
    Continue After Duo Device Health Install

Start Duo Device Health

The Duo Device Health app should start automatically after installation, but can also be started manually if needed:

Linux

Run this command from a terminal prompt: 

sudo systemctl start duo-device-health

macOS

  1. Open Spotlight with Command key ⌘ + Space bar.
  2. Type Duo Device Health and click the application search result.

Windows 10

  1. Open the Start Menu with Windows key ⊞ key or click the Windows logo on the far left of the taskbar.
  2. Type DuoDeviceHealth and click the application search result.

Other Install Methods

If your organization manages your computer, your IT team may push the Duo Device Health app to your computer automatically, without you needing to perform the install steps.

Your Duo administrator might also ask you to install the Duo Device Health app ahead of time. You can download the installers directly with these links:

View checksums for Duo downloads.

Duo Device Health App Updates

Duo Device Health updates automatically. Contact your organization's Duo administrator or Help Desk if your system has issues applying an update.

Log in with Duo Device Health

When you enter username and password into a Duo protected application, the Duo Device Health application checks the health of your device before you are able to access the application. This should only take a few seconds.

Once the health check completes you may choose an authentication method to verify your identity and log in to the application.

Duo Traditional Prompt

Duo Device Health Check from Duo Prompt

Duo Universal Prompt

Duo Device Health Check from Duo Universal Prompt

Fix Duo Device Health Issues

If the Duo Device Health check determines that your computer doesn't meet the security requirements for your organization, then you can't access the protected application and you'll see a notification in the Duo Prompt. On macOS and Windows systems, clicking the link in the notification opens the Duo Device Health app, which shows you what you need to address on your computer before you can access the application.

Click on the setting that needs action to see instructions for how to correct it so your device is healthy. If you need help, your Duo administrator may have added contact information to the Duo Device Health app, or you should contact your organization's help desk.

Duo Traditional Prompt

Duo Device Health Action Required in Duo Prompt

Duo Universal Prompt

Duo Device Health Action Required in Duo Universal Prompt

Duo Device Health for Linux runs as a background service, and does not have a clickable user interface. Use the information shown in the Duo authentication prompt to determine what you need to check on your system before you can access the application.

Jump to top