![\"\"](\"\/tech\/files\/2024\/11\/how-it-works_2x-636x166.png\")
<\/p>\nMulti-factor authentication (MFA) adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.<\/p>\n
<\/p>\n
\nOnce you’ve enrolled in Duo you’re ready to go: You’ll log in as usual with your username and password, and then use your device to verify that it’s you. At BU, you can verify with Duo Push in the Duo Mobile app, a passcode generated by the Duo Mobile app, or a hardware security key.<\/p>\n
Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked \u2014 you might not even know someone is accessing your account.<\/p>\n
Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you’ll be alerted right away (on your phone) if someone is trying to log in as you.<\/p>\n
This second factor of authentication is separate and independent from your username and password \u2014 Duo never sees your password.<\/p>\n
\nClick your device platform to learn more:<\/p>\n
iOS phones and tablets<\/a> <\/p>\n <\/P> Yes and Duo allows you to remember a device for 30 days. You can approve any computer that you commonly use and will not be required to provide two-factor authentication confirmation until next month. For example, if you have a desktop and a laptop, you can approve both computers as trusted devices and not have to confirm your identity with a phone until the following month.<\/p>\n <\/div>\n<\/div>\n Yes. You are encouraged to set up Duo on more than one device in case you forget or lose your phone. You can add as many devices as you like, such as a second smartphone, a tablet with the Duo Mobile app, or a hardware security key. When you log in, you can choose which device Duo sends the authentication request to.<\/p>\n <\/div>\n<\/div>\n Yes, you can use the Manage Devices<\/strong><\/a> feature to add, remove, or change the devices that Duo can use to verify who you are. Note that, when an administrator adds your device, you will not need to go through the setup screen – we will send you the needed codes directly from Duo Security.<\/p>\n <\/div>\n<\/div>\n If you get a new phone, even if the Duo app is restored from a cloud backup, it will lose its association with your account. Duo Push will not work on the new phone until it is reactivated.<\/p>\n You can reactivate your new phone with the Manage Devices<\/a> option. First, verify your identity using another device enrolled in Duo, such as a second phone, a tablet, or a hardware security key. From Manage Devices, select your phone and choose Activate Duo Mobile (or Reactivate Duo Mobile). This will prompt you to scan a new QR code with the Duo app on your new phone. If you don’t have another enrolled device, or have difficulties with this process, you can submit a ticket to the IT Help Center<\/a> or call for immediate assistance – 617-353-4357.<\/p>\n <\/div>\n<\/div>\n The Duo smart phone app is designed to work internationally. If you install the app, it can generate the required code without need of either a telephone signal or data plan, and it can do this anywhere in the world. If you have a signal and data plan, the app makes two-factor authentication as easy as a pushing a single button, but if you don\u2019t have one of those two things, you can use the app to generate a six digit code and enter that manually.<\/p>\n <\/div>\n<\/div>\n The “Remember your device for 30 days” option uses a persistent cookie. If you clear cookies after you log off of the browser, the device will not be remembered and you will have to confirm your identity again when logging in.<\/p>\n <\/div>\n<\/div>\n You can contact the IT Help Center<\/a>. They will verify your identity and provide a temporary passcode. We encourage you to then go into manage devices and add an additional phone.<\/p>\n <\/div>\n<\/div>\n Contact the IT Help Center<\/a> immediately and we will lock your Duo account to prevent malicious activity.<\/p>\n <\/div>\n<\/div>\n To resolve this issue:<\/strong><\/p>\n Disabling Content Restrictions<\/Strong><\/p>\n iOS 12 or newer<\/Strong><\/p>\n Note that if you are opening Screen Time for the first time and haven’t set up the feature, you will be prompted to set up the phone either for yourself or a child and will have the option to set a passcode.<\/p>\n iOS 11 or older<\/Strong><\/p>\n macOS 10.15 (Catalina) or higher<\/Strong><\/p>\n <\/div>\n<\/div>\n Logging in with Duo requires that JavaScript is enabled. If it is not, your attempt to log in will fail and your screen will look like this:<\/p>\n If you encounter this issue, disable any JavaScript blocking plugins or browser settings (or include an exception for scripts from duosecurity.com) and attempt to log in again.<\/p>\n <\/div>\n<\/div>\n The Duo smart phone app provides options that work without a data plan or even a connection, if necessary. The app can generate the required code without need of either a telephone signal or data plan, and it can do so anywhere in the world. If you have a signal and data plan, the app makes two-factor authentication as easy as a pushing a single button.<\/p>\n <\/div>\n<\/div>\n You can also use a tablet to access Duo, or purchase a Yubikey. Yes, everyone at the University is required to use Duo MFA.<\/p>\n <\/div>\n<\/div>\n Unfortunately, experience has shown that people are not as good at recognizing malicious email as you might think. Every day, members of the BU community fall prey to these kinds of scams. We have to take steps to ensure that we are more than just a single click away from having our paycheck stolen or becoming a victim of identity theft.<\/p>\n <\/div>\n<\/div>\n We encourage you to contact us with feedback, or with questions or concerns about the project in general. The Vice President of Information Services & Technology and the Information Security & Business Continuity governance committee for IS&T can be reached directly at duo@bu.edu<\/a>.<\/p>\n <\/div>\n<\/div>\n First, Duo will require a second method of confirmation for a person logging in to view or edit sensitive data. Individuals will be asked to confirm their identity using the Duo Mobile app, a hardware security key, or a secured kiosk (for certain staff).<\/p>\n The login screen you’re used to seeing at [www.bu.edu\/buworkscentral\/](https:\/\/www.bu.edu\/buworkscentral\/)<\/a> will change slightly. Also due to the transition, Web Login-secured applications, including those linked from BUworks Central, will require you to log in again. These other applications do share the same login credentials as many applications at BU, so logging in more than twice during a session is very unlikely.<\/p>\n More and more applications to be compatible with the high-security login process so that you’ll be required to log in less often while using web applications.<\/p>\n <\/div>\n<\/div>\n If you’re unable to use the Duo Mobile App (e.g., due to device compatibility issues), you can use security token as an alternative. For more information about hardware security keys and how to set them up, visit the Duo Webpage: https:\/\/guide.duo.com\/security-keys<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" What is Two-Factor Authentication? Multi-factor authentication (MFA) adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password. How It Works 1. Enter username and password as usual 2….<\/p>\n","protected":false},"author":1303,"featured_media":0,"parent":74764,"menu_order":17,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/77874"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/1303"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=77874"}],"version-history":[{"count":55,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/77874\/revisions"}],"predecessor-version":[{"id":163642,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/77874\/revisions\/163642"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/74764"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=77874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Android phones and tablets<\/a>
Security Keys<\/a><\/p>\nTroubleshooting and frequently asked questions<\/h2>\n
\nDo I have to use Duo every time I log in to an online application at BU?<\/h3>
<\/p>\n
\nCan I set up Duo on more than one device?<\/h3>
<\/p>\n
\nWhat is the Manage Devices button? Can I use that to add more devices?<\/h3>
<\/p>\n
\nI have a new phone and the Duo app stopped working. What should I do?<\/h3>
<\/p>\n
\nCan I use the Duo app internationally?<\/h3>
<\/p>\n
\nWhat happens if I set up my browser to clear cache\/cookies after exiting?<\/h3>
<\/p>\n
\nWhat if I forget my phone at home?<\/h3>
<\/p>\n
\nWhat if I lose my phone?<\/h3>
<\/p>\n
\nWhy am I seeing a blank DUO screen when using an iOS or macOS device when accessing a BU site requiring Single Sign On (SSO) Authentication?<\/h3>
\nLogging in with Duo requires that JavaScript is enabled<\/p>\n\n
\n
\n
\n
\n
\n
After confirming a legitimate login attempt, I'm stuck on a strange two-step screen. Why?<\/h3>
<\/p>\n![](\"\/tech\/files\/2014\/06\/two-step-noscript.jpg\")
<\/p>\n
\nWhat if I don\u2019t have a data plan on my phone? What if I don\u2019t have a connection?<\/h3>
<\/p>\n
\nI am studying abroad this semester and don't have an international phone plan, can I still use Duo?<\/h3>
\nYES! Duo works internationally, don\u2019t worry \u2013 Duo can work with or without cellular service or a wifi connection.
\nEven with cellular service disabled or without a wifi connection, you may use the Duo Mobile app to generate a passcode that you can use to authenticate. Simply choose the Enter a Passcode option when you get the Duo authentication prompt. To generate the passcode, open the Duo Mobile app on your phone or tablet and tap the button with the KEY symbol.
\n<\/div>\n<\/div>\n
\nWhat happens if I forget my phone at home?<\/h3>
\nYou can contact the IT Help Center. They will verify your identity and provide a temporary passcode. We encourage you to then go into manage devices and add an additional phone\/device.
\n<\/div>\n<\/div>\n
\nWhat if I lose my phone?<\/h3>
\nContact the IT Help Center immediately and we will lock your Duo account to prevent malicious activity.
\n<\/div>\n<\/div>\n
\nWhat if I don\u2019t have a smartphone or cell phone?<\/h3>
\nIf you don’t have a smart phone, you can use security token as an alternative. For more information about hardware security keys and how to set them up, visit the Duo Webpage: https:\/\/guide.duo.com\/security-keys<\/a><\/p>\n
\n<\/div>\n<\/div>\n
\nWhat is a Yubikey and how does it work with Duo?<\/h3>
\nA Yubikey is a small hardware device (think USB stick) that supports two-factor authentication. A Yubikey can be plugged into your computer’s USB port or “tapped” on your device (if supported) to verify your login. A Yubikey is another method you can use to access Duo! Yubikeys can be purchased from Amazon or directly from the Yubico.
\n<\/div>\n<\/div>\n
\nWhat if I have an extenuating circumstance that doesn't allow me to use Duo?<\/h3>
\nContact the IT Help Center and they will be able to help you find the best solution for accessing Duo two-factor.
\n<\/div>\n<\/div>\n<\/p>\nAbout Duo and two-factor authentication<\/h2>\n
Am I required to use two-factor authentication?<\/h3>
\n
\nI know how to avoid phishing email messages, why do I need to use this?<\/h3>
<\/p>\n
\nWhom should I contact if I have questions or concerns about the requirement to use Duo?<\/h3>
<\/p>\n
\nHow will Duo use change how I log in to BUworks and other web services?<\/h3>
<\/p>\n
\nDo I need a smart phone to use Duo?<\/h3>
<\/div>\n<\/div>\n<\/p>\n