Authenticating with the Traditional Duo Prompt

The Duo Prompt lets you choose how to verify your identity each time you log in.

Has your organization enabled the new Universal Prompt experience? See the Universal Prompt guide for more information and instructions. Duo Push in Universal Prompt

Researching Duo for your organization? Learn about Duo's multi-factor authentication (MFA) solutions.

Using the Traditional Duo Prompt

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 11 or later. Some browsers do not support all of Duo's authentication devices (for example, Security Keys won't work with Internet Explorer). For the widest compatibility with Duo's authentication methods, we recommend recent versions of Chrome and Firefox.

After completing Duo enrollment (or if your Duo administrator set you up to use Duo), you'll see the Duo Prompt the next time you perform a browser-based login to a web service or application protected with Duo.

Duo Prompt

If you have more than one device enrolled, like a mobile phone and a hardware token, you'll see a device selector.

Select Device in Duo Prompt

Select the device you want to use and then choose your authentication method.

Method Description
Duo Push Pushes a login request to your phone or tablet (if you have Duo Mobile installed and activated on your iOS or Android device). Just review the request and tap Approve to log in.
Call Me Authenticate via phone callback.
Enter a Passcode

Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.

Click Send codes to get a new batch of passcodes texted to your phone.

You can also use security keys for one-touch hardware-backed authentication.

Your Duo administrator may have limited which authentication methods you can use to log in. If this is the case, then the Duo prompt shows only the allowed methods. So, if your organization disallows phone call for Duo logins, the prompt may only show the "Send Me a Push" and "Enter a Passcode" options.

In the event that your organization restricts use of the authentication methods attached to your account, you'll see a message indicating this, with the option to enter a Duo bypass code.

Duo Prompt with Bypass Code Option Only

If you can't authenticate or aren't sure what to do, click Need help? on the left side of the Duo prompt. Your administrator may have customized the help text with additional instructions or contact information.

Custom Help Text

Self-Service Options

If your organization has enabled self-service you can add an additional authentication device by clicking the Add a new device link, or update your setting and remove authentication methods by clicking My Settings & Devices.

Add a New Device

Remembered Devices

You'll also see a Remember me for... option if your administrator enabled Duo's remembered devices feature. If you check this box when authenticating you won't need to perform Duo second-factor authentication again for the duration specified on the prompt.

Remembered Device

Authenticating from Smaller Screens

If you're logging in with Duo from a device with a smaller screen (like a tablet) or small browser window then your Duo Prompt may look slightly different. Don't worry! All the devices and options shown in the full-size prompt are available for use, and you can enroll and manage devices by following the same steps.

Small Duo Prompt

Access Add a New Device or My Settings & Devices by clicking the Settings button at the top. Click the X on the Settings button to return to the Duo Prompt.

Small Duo Prompt Settings

Software Updates

You may be prompted to update outdated browser or plugin software when authenticating if your organization enabled this feature. You can take a few minutes to update your web browser, Flash, or Java version to the most recent before authenticating, or choose to update later and continue on to the protected resource.

Duo Prompt with Outdated Software Notification

If your organization blocks access to Duo-protected resources from devices with outdated browsers or plugins, then you may not complete two-factor authentication until you update your software.

Blocked Software Notification

Learn more about software updates.

Your administrator may also choose to block access from certain computer and mobile operating systems. In this case, you must upgrade your OS to an allowed version or switch to a different device.

Blocked OS Notification

Personal Devices

Your organization may choose to block access to applications from devices not managed by the organization. If this policy is enforced then you won't be able to complete Duo authentication from your personal device.

Blocked Personal Device Notification