DUO – Two-Factor Authentication

Two-factor authentication adds a second layer of security to your UWA account. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password. Passwords alone no longer provide adequate protection. Get started now by activating Duo!

How does it work?

  1. Enter your username and password as usual
  2. Use your phone to verify your identity
  3. Securely logged in

Authentication Options

  • Push Notification (RECOMMENDED) – With the DUO Mobile app, you can receive a DUO notification on your phone. Open the notification, and you will see two options: a green checkmark and a red X. If you are signing into your account, tap the green checkmark to log in. If you are not signing into your account, tap the red X to deny the login, and change your password immediately.
  • Passcodes – The DUO Mobile app will also generate a passcode. This option doesn’t require wifi or data, so it is an option if you have limited or no cell/internet service. To get your passcode, open the DUO Mobile app and tap on the UWA logo. When logging in, choose the passcode option and enter the code to log in. If you don’t have your device, you may call the Office of Information Technology at 205-652-3565 to have a one-time passcode generated for you.
  • Phone Call – The DUO system can also call you on your mobile device or landline phone. DUO will call you and you can press 1 to log in.

Why do I need this?

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account! Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you’ll be alerted right away (on your mobile device) if someone is trying to log in as you. This second factor of authentication is separate and independent from your username and password — Duo will never see your password!

Supported devices

  • iPhone and iPad
  • Android
  • Windows Phone
  • Cell Phones and Landlines

How do I set it up?

Duo’s self-enrollment process makes it easy to register your device and install the mobile app (if necessary). For more information, please see “Activate DUO“.

Duo FAQs

Is DUO mandatory?
DUO is mandatory for all faculty, staff and retired employees. We are currently investigating the use of DUO for students.
What is Autopush?

We recommend leaving Autopush or Autocall disabled. Instead, we recommend using the “Remember me” option. If you are unable to use the “Remember me” option, make sure Autopush or Autocall is disabled. If you’ve previously enabled Autopush or Autocall, and you want to remove it, you must deactivate and reactivate your device with DUO.

What are passcodes?

If you choose not to use DUO Mobile push notifications, passcodes can be used as your second verification method.

  • Passcodes from the DUO Mobile app – If you have DUO Mobile installed, tap the UWA logo to retrieve your password.
  • Passcodes from the Office of Information Technology – If you don’t have your device, you may call the Office of Information Technology at 205-652-3565 to have a one-time passcode generated for you.
What does “Remember this device for 30 days” mean?

Activating this setting will allow you to bypass DUO for the next 30 days. However, this only works if you are logging in from the same computer, IP address and browser. You will still be prompted for your username/password, but DUO will not be required during the 30 days. This feature is useful for computers you use on a regular basis.

What applications are using DUO?

The following applications currently require DUO authentication:

  • Office 365, including email
  • Self-Service
  • Helpdesk
  • Adirondack (Housing and University Police)
  • KUMO (used in labs to connect to OneDrive)
  • Maxient
  • Dropbox for Business
  • UWA Alerts

More applications will be added soon!

What if I get a notification that someone is trying to sign into my account and it is not me?

With DUO Push, hit the red X to deny access the your account and change your UWA password immediately at http://myaccount.uwa.edu.

What if I get a new device?

If your phone number is the same, log into https://enrollduo.uwa.edu then choose the “Call my Phone” option. Then click on replace your existing phone or tablet with a new device. Choose your device from the list, and then following the instructions to activate DUO Mobile on your new device.

If you phone number is NOT the same,