Duo Traditional Prompt Enrollment Guide

Duo's self-enrollment process makes it easy to register your phone or tablet and activate the Duo Mobile application so you can receive Duo requests via push notification and tap to approve and login.

Has your organization enabled the new Universal Prompt experience? See the Universal Prompt guide for more information and instructions.

Traditional Duo Prompt End of Support

The traditional Duo Prompt reached the end of support for most applications in March 2024. Your organization may still be completing its migration to the Duo Universal Prompt.

Please contact your organization's Duo administrator or help desk if you see a "Setup error" message from Duo when you're accessing an application that still uses the traditional Duo Prompt.

Enrolling in the Duo Universal Prompt

If your organization is using the Duo Universal Prompt please refer to the Universal Prompt first-time enrollment instructions.

Enrolling Your Phone or Tablet in the Duo Traditional Prompt

Duo prompts you to enroll the first time you log into a protected VPN or web application when using a browser or client application that shows the interactive Duo web-based prompt. Alternatively, you might receive an email from your organization's Duo administrator with an enrollment link.

Supported Browsers: Chrome, Firefox, Safari, Edge, Opera, and Internet Explorer 11 or later. Some browsers do not support all of Duo's authentication devices (for example, Security Keys won't work with Internet Explorer). For the widest compatibility with Duo's authentication methods, we recommend recent versions of Chrome and Firefox.

Step One: Welcome Screen

Click Start setup to begin enrolling your device.

Step Two: Choose Your Authentication Device Type

Select the type of device you'd like to enroll and click Continue. We recommend using a smartphone for the best experience, but you can also enroll a landline telephone, a security key, or iOS/Android tablets.

Step Three: Type Your Phone Number

Select your country from the drop-down list and type your phone number. Use the number of your smartphone, landline, or cell phone that you'll have with you when you're logging in to a Duo-protected service. You can enter an extension if you chose "Landline" in the previous step.

Double-check that you entered it correctly, check the box, and click Continue.

If the phone number you entered already exists in Duo as the authentication device for another user then you'll need to enter a code sent to that number by phone call or text message to confirm that you own it. Choose how you want to receive the code and enter it to complete verification and continue.

If you're enrolling a tablet you aren't prompted to enter a phone number.

Step Four: Choose Platform

Choose your device's operating system and click Continue.

Step Five: Install Duo Mobile

Duo Mobile is an app that runs on your smartphone and helps you authenticate quickly and easily. Without it you'll still be able to log in using a phone call or text message, but for the best experience we recommend that you use Duo Mobile.

Follow the platform-specific instructions on the screen to install Duo Mobile. After installing our app return to the enrollment window and click I have Duo Mobile installed.

Step Six: Activate Duo Mobile

Activating the app links it to your account so you can use it for authentication.

On iPhone and Android, activate Duo Mobile by scanning the QR code with the app's built-in QR code scanner. Follow the platform specific instructions for your device.

If this is the first account you're adding to Duo Mobile, step through the introduction screens and then tap Use a QR code to scan the QR code.

The "Continue" button is clickable after you scan the QR code successfully.

Can't scan the QR code? Click Email me an activation link instead. and follow the instructions.

If you enroll in Duo from an Android or iOS device, instead of scanning a QR code tap the Take me to Duo Mobile button. This will launch Duo Mobile and complete activation of the account.

Step Seven: Configure Device Options (optional)

You can use Device Options to give your phone a more descriptive name, or you can click Add another device to start the enrollment process again and add a second phone or another authenticator.

If this is the device you'll use most often with Duo then you may want to enable automatic push requests by changing the When I log in: option and changing the setting from "Ask me to choose an authentication method" to "Automatically send this device a Duo Push" or "Automatically call this device" and click Save. With one of the automatic options enabled Duo automatically sends an authentication request via push notification to the Duo Mobile app on your smartphone or a phone call to your device (depending on your selection).

Click Continue to login to proceed to the Duo Prompt.

Congratulations!

Your device is ready to approve Duo push authentication requests. Click Send me a Push to give it a try. All you need to do is tap Approve on the Duo login request received at your phone.

Learn more about authenticating with Duo in the guide to using the Duo Prompt.

Add or Manage Devices After Enrollment

If enabled by your administrator, you can add a new authentication device or manage your existing devices in the future via the Duo Prompt.

Otherwise, contact your organization's Duo administrator if you ever need to change your phone number, re-activate Duo Mobile, or add an additional phone.

Other Supported Authentication Methods

Duo supports a wide variety of devices that you can use in addition to Duo Push on your smartphone. Learn more about other types of devices you can enroll, like Security Keys and macOS Touch ID, or different ways of using your phone to authenticate, like with receiving SMS passcodes or approving logins via phone call. Some authentication methods may be restricted by your organization's policy, or incompatible with some browsers or applications.