Two-Factor Authentication (Duo)
Two-factor authentication (2FA), also known as multifactor authentication (MFA), adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.
The University of Cincinnati uses Duo Security for two-factor authentication. Duo Push with the Duo Mobile App is the university’s primary method of two-factor authentication.
How Duo Works
Each time you log in to a university system using your UC username and password, Duo will send a push notification to your mobile device. Simply approve the request to securely access the system.
Security reminder: Click "Deny" for any Duo authentication requests you did not initiate yourself.
Duo Security Enhancements
Effective Wednesday, January 21, 2026, Duo authentication via SMS text messages and phone calls will no longer be supported. This change is part of the university’s ongoing efforts to enhance security and protect users from increasingly sophisticated phishing attacks that target these less secure methods.
- If you haven’t already, install the Duo Mobile App on your iOS or Android device.
- Open a private/incognito browser window and go to https://mail.uc.edu.
- You can do this on a phone, tablet, or laptop but the private window is essential. We’ve linked below to instructions for opening private windows in commonly used browsers.
- When prompted, enter your UC username and password.
- STOP. Do not continue to authenticate with Duo. Go to the next step.
- Select “Other options” on the Duo screen. This will open a screen called “Other options to log in.”
- Select “Duo Push” from the list and follow the prompts to set “Duo Push” as your authentication method.
Get Started with Duo
New to UC or don't have Duo yet? Follow the steps below to get the app and enroll your device(s) in Duo.
- Install the Duo Mobile App on your iOS or Android device.
- Go to https://mail.uc.edu/—or any other secure UC site—and, when prompted, select “Next.”
- Select “Duo Mobile” and follow the prompts to enroll your mobile device.
Visit the Duo Self-Enrollment Guide in the IT Knowledge Base for detailed, step-by-step instructions.
Manage Your Duo account
Already have Duo? Make sure you have the Duo Mobile App on your iOS or Android device. Then, follow the steps below to access your settings in Duo.
- Open a private/incognito browser window and go to https://mail.uc.edu. When prompted, enter your UC username and password.
- STOP. Do not continue to authenticate with Duo. Go to the next step.
- Select “Other options” on the Duo screen. This will open a screen called “Other options to log in.” Select an option from the list and follow the prompts to update your settings.
Secondary Authentication Methods
Duo Push with the Duo Mobile App is the university’s primary method of two-factor authentication. With the Duo Mobile App, you can also set up a secondary authentication method to use anytime you don’t have access to your phone.
Security Keys
The Office of Information Security recommends security keys as the preferred method of secondary authentication with Duo.
A security key is a small device that connects to your computer’s USB port and helps confirm your identity when you log in. When you tap it, the key securely sends a verification code to Duo to complete the login process. Duo supports these keys using the industry-standard WebAuthn (also known as FIDO2) technology.
Platform Authentication
Platform authentication (e.g. fingerprint, TouchID, etc.) allows you to log into your laptop or your desktop without the need to access your phone.
The Office of Information Security recommends setting up Duo Push through the Duo Mobile App before enabling platform authentication on your device.
ChromeOS: Follow the steps below to configure Platform Authentication on a Chromebook:
- Using your Chromebook, open a private browser window and go to https://mail.uc.edu.
When prompted, enter your UC username and password. - STOP. Do not continue to authenticate with Duo. Go to the next step.
- Select “Other options.” This will open a screen called “Other options to log in.”
- Select "Manage devices" from the list.
- You must now verify your identity using one of the authentication methods you already have set up such as Duo Push.
- On the device management portal page select "Add a device".
- On the add a device prompt, select "Device Verification", then select continue.
- Now you will be prompted to verify your identity.
- If the device has biometric such as fingerprint reader, you will be prompted to use that method.
- If your device does not have biometric you will be prompted to enter the device password. Note: this is not your UC password, it is the password that you use to log into the Chromebook.
- Click Continue and click "Back to Login."
- You will be prompted for your Chrombook password or fingerprint.
- Your device should now be configured to authenticate with Duo.
- Face ID and Touch ID on compatible iOS and iPadOS devices.
- Touch ID on compatible macOS devices.
- Windows Hello on compatible Windows devices.
- Android biometrics, such as Pixel fingerprint or facial recognition.
- Samsung fingerprint or facial recognition.
Accessibility and Duo
If you are a student in need of accessibility accommodations, please contact the Accessibility Resources Office. You can find more information and submit requests at: https://www.uc.edu/campus-life/accessibility-resources.html.
Faculty and Staff seeking accommodations should reach out to their department's Human Resources contact for assistance.
Duo FAQ
Due to an issue with using embedded browsers, Mac and Chrome devices do not support using security keys or TouchID/FaceID to log in to the UC VPN. Windows devices and other UC services do not appear to be affected by this issue.
You can still authenticate without an Internet or cellphone connection by using the Duo Mobile App passcode option. Tap the icon in the app to generate a code offline.
More information on using Duo Mobile App passcodes can be found in the Duo Mobile App Passcode IT Knowledge Base article.
If you have a new device and need to enroll that device in Duo Mobile, please follow the instructions in the Reactivate Duo Mobile IT Knowledge Base article.
If you have received a Duo prompt to accept a login request that you were not expecting, please select “Deny” and immediately change your password at uc.edu/PSS.
The Duo Mobile app is available to download on the Apple App Store for mobile Apple devices and Google Play Store for Android devices.
- For compatible Android devices with Duo Mobile, please visit Duo’s compatibility support page at https://help.duo.com/s/article/1872?language=en_US.
- For compatible Apple devices, please visit Duo’s compatibility support page at https://help.duo.com/s/article/1871?language=en_US.
The Office of Information Security recommends security keys as the preferred method of secondary authentication with Duo. View more about WebAuthn/FIDO2 security keys on Duo’s website.
Duo Push will continue to function with an Internet connection.
If you require further assistance, our IT Help Desk is ready to help. Submit a ticket. Or call us! Dial 513-556-HELP from a personal phone or 6-HELP (4357) from a university phone on campus; then, select option 2.
To add a new device to Duo, please visit the Duo Management Guide IT Knowledge Base article.
Need IT Help?
- Get how-to instructions in the IT Knowledge Base.
- Submit a ticket.
- Or, call the IT Service Desk.
- From a personal phone, dial 513-556-HELP (4357); select option 2.
- From a university phone on campus, dial 6-HELP (4357); select option 2.
- From a personal phone, dial 513-556-HELP (4357); select option 2.