Duo
Duo
Embedded Files
At Smith College, ITS provides two-factor authentication to help you protect your account information. Two-factor authentication requires you to verify your identity on a second device (such as your phone or other mobile device) before you finish logging into your account.
On devices you trust, you’ll have to go through the process about once a week. If you choose not to trust a device, you will be prompted each time you access a Smith resource from that device.
We are making some updates to Duo this spring to better protect your accounts. See Changes to Duo for more information.
About Duo & Fraud Prevention
About Duo & Fraud Prevention
What does this protect? Your information in Workday, including your social security number and personal financial information. It protects your email communications, access to your coursework, research data, and other electronic content including pictures and chat logs, and access to cloud-based services.
Authentication through Duo is required for Smith College instructors, staff, and students to help protect account information. This requirement of a second, separate verification step helps keep your account secure even if someone else has your password.
Got a Duo Request That You Didn't Initiate?
Got a Duo Request That You Didn't Initiate?
If you receive an alert from Duo (push notification, text, or phone call) when you are not in the process of logging into a Smith application, DO NOT approve the request. An uninitiated notification indicates that your password has been compromised.
If you approved a notification but believe it was not initiated by you:
Change your password immediately. If you use the same password for other accounts, change those as well.
Contact ithelp@smith.edu
If you ignored or denied the notification:
If you selected "Deny", you will be prompted to report the request as fraudulent and will receive a follow-up communication from ITS.
If you receive a Duo phone call you did not initiate, press 9 to report the suspicious activity.
As a precaution, change your password. If you use the same password for other accounts, change those as well.
NOTE: If you use the "Phone Call" option for two-factor authentication:
You are required to press 1 to approve the login when you answer the call. The requirement to press a specific key significantly helps prevent accidental approvals of fraudulent attempts.
Get Started
Get Started
What You Need:
What You Need:
A desktop or laptop computer. You must enroll in Duo from a computer—you cannot enroll in Duo on a mobile device like your smartphone or tablet.
A device to approve Duo authentication requests. A smartphone or security key is recommended when adding your first device.
Mobile device: Download the Duo Mobile app on your device before you begin enrollment. Check the requirements for iOS and Android.
Security Key: If you have a cell phone or an older smartphone that cannot support the Duo Mobile app, we recommend using a security key as a primary device. Request a security key by submitting a ticket to User Support or emailing ithelp@smith.edu, then follow the steps to enroll.
IMPORTANT: When setting up your primary Duo device, use a phone number or security key that you have convenient access to. Do not use other options such as Touch ID, Chrome on Mac, iCloud keychain, or Windows Hello as a primary method.
Enroll Your First Device
Enroll Your First Device
To begin, open a new browser window and go to the Smith Portal or Workday. Log in with your Smith username and password. The enrollment screen will appear automatically the first time that you access these Smith College applications.
Select Get Started.
Per the above recommendation, select Duo Mobile or Security Key as your method of authentication and follow the prompts. (Note that the Phone number choice is not supported at Smith.)
After you have finished setting up Duo Mobile or a security key as your first device, it is recommended that you add a second device. See Set Up Additional Devices for information and instructions.
Got a New Phone? You'll need to update your devices in Duo. See Have a New Phone below for instructions.
Approving Login Requests
Approving Login Requests
When you log into an application protected with Duo, a Duo prompt will ask you to verify your identity using a method that you have set up for your account. You can use the default method or choose an alternate method by selecting Other Options.
Duo Mobile
Duo Mobile
When using the Duo app, you'll get a push request sent to your phone. Select approve to authenticate.
With Duo Verified Push (enabled after April 14), the notification will prompt you to enter a 3-digit code to approve the request.
Here's how it works:
1 - When logging into an application through your Smith account, the prompt on the screen will include a three digit code.
2 - Open the Duo Mobile app through the push notification on your device and enter the code in the boxes.
3 - Select Verify to confirm, or I'm not logging in if you didn't initiate the notification.
Remember to never approve requests you did not initiate!
Security Key
Security Key
To authenticate with a security key, plug it into the USB port on your computer, and tap when prompted by Duo to verify your identity. Visit Security Key for more from Duo.
Don't Approve Requests You Did Not Initiate!
Don't Approve Requests You Did Not Initiate!
If you receive an alert from Duo when you are not in the process of logging into a Smith application, DO NOT approve the request. An uninitiated notification indicates that your password has been compromised.
If you DID approve a notification but believe it was not initiated by you:
Change your password immediately. If you use the same password for other accounts, change those as well.
Contact ithelp@smith.edu
If you ignore or deny the notification:
Change your password immediately to be safe.
If you have selected "Deny", you will be prompted to report the request as fraudulent and will receive a follow-up communication from ITS.
Manage Your Devices
Manage Your Devices
Have a New Phone?
Have a New Phone?
If your new phone has a new phone number (different from what you previously set up in Duo), you will need to add it as a new device, following the instructions below. Note: You will only be able to do this if you already have at least one backup device. If you don’t have a backup device registered, you’ll need to contact ITS User Support.
If your new phone uses the same phone number as your old phone, you can update that device in Duo using these steps.
Open a new private or incognito browser window on your computer to ensure you receive the Duo prompt, and navigate to the Smith Portal or Workday.
Enter your Smith username and password.
When the Duo pop-up window appears, select Need Help? in the bottom left corner.
Then select the link under “I got a new phone” and follow the prompts.
To confirm the device was successfully added and to view your other Duo devices, go back to the Manage Devices page.
Refer to Duo’s instructions for more details on adding a new phone.
Set Up Additional Devices
Set Up Additional Devices
We highly recommend adding at least one additional device in case you don’t have access to your primary device. Having a backup means you’ll still be able to log into your Smith accounts without contacting IT Support. You can add as many additional devices as you like and use any device to authenticate with Duo.
Note: We recommend using either Duo Mobile or a security key as your primary device, and also choosing an additional device. If you are unable to download the Duo app, you can request a security key by submitting a ticket to User Support or emailing ithelp@smith.edu.
Scenarios where your backup device would be helpful include:
You don’t have your phone with you, and you need access to your Smith email or other resources.
You lose your primary device.
You get a new phone and don’t have access to the old phone.
Refer to the table below for available options:
Method
How it Works
Requirements
Duo Mobile
You can use the Duo Mobile app on multiple devices that can support it. If you use it on your smartphone, it can also be downloaded on another mobile device, like a tablet, and used as a backup.
Receive a push notification on your device and approve the authentication request.
Visit Duo Mobile for more from Duo.
Security key
To authenticate with a security key, plug it into the USB port on your computer, and tap when prompted by Duo to verify your identity.
Visit Security Key for more from Duo.
Compatible security key. A key may be provided by ITS in certain circumstances. Submit a request or email ithelp@smith.edu. You can also purchase one on your own.
Computer with USB port.
Supported browser: Chrome, Firefox, or Edge.
Set up the key through User Support.
Touch ID for Mac
Use the fingerprint sensor on Apple MacBooks to verify your identity with Duo.
Recommended for use as a backup device only.
Visit Touch ID for more from Duo, including instructions for setting up Touch ID on your Mac.
MacBook Pro, MacBook Air, or Magic Keyboard with a Touch ID button.
Duo Desktop
When using Duo Desktop to authenticate, a window will open on your computer, asking you to approve or deny the request.
Recommended for use as a backup device only.
Visit Duo Desktop for more from Duo.
Windows Hello
*Not currently available on Smith-assigned computers
Windows Hello is a security feature offered through Windows 10 and 11 that allows you to sign in with a PIN, fingerprint, or facial recognition. Use one of these methods through Windows Hello to authenticate with Duo.
Recommended for use as a backup device only.
Visit Windows Hello for more from Duo, including how to set up Windows Hello on your computer.
A personal computer running Windows 10 or later.
A supported browser: Chrome, Edge, or Firefox.
Add a New Device
Add a New Device
Follow the instructions below to add a new device.
You can also visit Add or Manage Devices After Enrollment on Duo's help site.
1. Open a new private or incognito browser window on your computer to ensure you receive the Duo prompt and go to the Smith Portal or Workday.
2. Enter your Smith username and password.
3. When the Duo pop-up window appears, select Other options.
4. From the list of options, select Manage Devices (typically at the end of the list).
5. Duo will then ask you to verify your identity before you can proceed. Select a method and follow the usual Duo prompts. Once verified, a list of your existing approval methods will display, along with the option to add a device.
6. Select the option Add a device. A list of new valid device types to pick from will display.
7. From the list, choose an alternate method for approving Duo requests. See Set Up Additional Devices for a list of commonly used devices/methods.
Troubleshooting and Support
Troubleshooting and Support
Got a New Phone?
Got a New Phone?
See the Have a New Phone section above for instructions.
Keep Your Duo Mobile App Updated
Keep Your Duo Mobile App Updated
If you use the Duo Mobile app to authenticate your account with push notifications, it's important to keep it up-to-date to avoid disruptions in service and security. To learn about alternative methods for approving authentication requests, see the Set Up Additional Devices section on this page.
Update Your App
Update Your App
We recommend enabling automatic updates or updating the app regularly to ensure that you continue to receive notifications. Update the Duo Mobile app through your device’s app store.
OS Requirements
OS Requirements
To view the OS requirements and latest app version information, refer to Duo's documentation: iOS, Android.
View Your Current Mobile App Version
View Your Current Mobile App Version
On your mobile device, open Duo Mobile.
At the upper left of the screen, select the three horizontal lines (hamburger icon).
The version will be listed at the bottom, e.g., Version 4.104.0.1 (Android) or 4.104.0.1485.1 (iOS).
FAQ
FAQ
General
General
What services are covered by Duo?
Any service that uses Smith’s Single Sign-On for authentication will also require Duo for authentication once activated. The most common services included are Smith email, Workday, Smith Portal, Moodle, and the VPN.
I have been granted delegated access to another account from my account. Will I use Duo to access the delegated account?
No. Delegated accounts through your individual Smith account, so you would authenticate with Duo as usual for your account.
I cannot access my Duo-protected primary device or any of my other devices to verify my identity. How can I log in to my Smith account?
Contact the ITS User Support Center at 413-585-4487 or submit a request for IT help to access your account - you will be asked to verify your identity.
Review how to add a backup device, which will allow you to manage devices without IT assistance and to log in if you do not have your primary device.
What's the difference between a primary and backup device?
A primary device should be something you have with you and can use all the time. We recommend using the Duo Mobile app on your smartphone. If you don't have a smartphone, a security key is a good alternative.
Duo Mobile
Duo Mobile
I select “Send Me a Push,” but it’s not showing up on my phone?
Check your phone’s settings to ensure that alerts are enabled for the Duo application. Also, try opening the Duo app to ensure that the push request is reaching your phone. If you got a new phone recently, you must re-register the device with Duo, even if it has the same number. Visit the Have a New Phone section above for instructions. Alternatively, you can use another method, like Duo Desktop, as a backup.
Other Devices
Other Devices
I want to add another device (or change my settings), but I selected "Trust this device." How do I do this?
The “Trust this device” option is tied to a specific browser on one computer. You can open a different browser and/or log in on a different device, which will require you to authenticate. You will then be able to access the settings for your Duo account and manage your devices. In Chrome and Safari, you can also open an incognito/private window. (Ctrl+Shift+N or Cmd+Shift+N).
What is a security key? Where can I get one?
A security key is a small USB device that you can purchase and plug into your computer’s USB port to authenticate with Duo. It is used to approve Duo requests instead of using a phone. Security keys can be purchased or be requested from ITS for use in special circumstances by submitting a a ticket to User Support or emailing ithelp@smith.edu.
Can I use my computer to authenticate, instead of a phone?
If you cannot use the Duo Mobile app on a smartphone, we recommend getting a security key, which is used to authenticate through the USB port on your computer. Additionally, backup methods like Duo Desktop and Touch ID for Mac work on your computer.
Travel
Travel
I’m traveling abroad and won’t be able to use cell service. What are my options?
You don't need cell service to get a push from the app on your phone. As long as your device has Wi-Fi connectivity where you are and you have the Duo Mobile app, you will still be able to receive Duo requests. You can also use the Duo for Desktop App, Touch ID, or Windows Hello on your computer as a backup.
If you won't have access to a phone or Wi-Fi, contact User Support to request a security key before you leave. They will help you register the key as a new device. Setup is fast, easy, and does not require a push for verification.
If you’re already away and don’t have other options, contact IT User Support.
Page updated
Report abuse