Two-factor authentication adds a second layer of security to your UWA account. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.

How does it work?

  1. Enter your username and password as usual
  2. Use your phone to verify your identity
  3. You are securely logged in

How do I set it up?

Duo’s self-enrollment process makes it easy to register your device and install the mobile app (if necessary).

Activating DUO

Please note: During the activation process, you will need to take a picture of a QR code with your phone. Please activate your account from a computer, not your mobile device.

Step 1 – Activate DUO on your account

Visit the DUO Management Portal and click “Activate DUO.”

Step 2 – Enroll your device

Now that your account is activated, you’ll need to enroll your device(s). The DUO Management Portal will prompt you to do this automatically. You can choose mobile phone, tablet or a landline phone. Using a mobile phone is the recommended way to use Duo.

If you choose a mobile device, you will be prompted to enter your phone number and choose the type of device you have (iPhone, Android, etc.)

Step 3 – Install and activate DUO Mobile

DUO will walk you through how to download the mobile app for your device. Once you install the app, you will activate it by scanning the QR code with the app’s built-in scanner. Just follow the prompted instructions through the app.

You’re ready to use DUO!

With DUO activated on your account, and with your device enrolled, you are ready to use DUO when signing into a variety of UWA services. Be sure to take advantage of the “Remember Me for 30 Days” feature by checking the box when logging in.

Authentication Options

  • Push Notification (RECOMMENDED) – With the DUO Mobile app, you can receive a DUO notification on your phone. Open the notification, and you will see two options: a green checkmark and a red X. If you are signing into your account, tap the green checkmark to log in. If you are not signing into your account, tap the red X to deny the login, and change your password immediately.
  • Passcodes – The DUO Mobile app will also generate a passcode. This option doesn’t require wifi or data, so it is an option if you have limited or no cell/internet service. To get your passcode, open the DUO Mobile app and tap on the UWA logo. When logging in, choose the passcode option and enter the code to log in. If you don’t have your device, you may call the Office of Information Technology at 205-652-3565 to have a one-time passcode generated for you.
  • Phone Call – The DUO system can also call you on your mobile device or landline phone. DUO will call you and you can press 1 to log in.

Why do I need this?

Passwords are increasingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account! Two-factor authentication adds a second layer of security, keeping your account secure even if your password is compromised. With Duo Push, you’ll be alerted right away (on your mobile device) if someone is trying to log in as you. This second factor of authentication is separate and independent from your username and password — Duo will never see your password!

Supported devices

  • iPhone and iPad
  • Android
  • Windows Phone
  • Cell Phones and Landlines

Duo FAQs

Is DUO mandatory?
DUO is mandatory for all students, faculty, staff and retired employees.
What is Autopush?

Autopush refers to the automatic sending of a Duo Push notification to a user’s mobile device when they attempt to log in to a service protected by Duo Security’s two-factor authentication system. Instead of manually requesting a push notification or using another authentication method, the system automatically sends the request, streamlining the login process. 

We recommend leaving Autopush or Autocall disabled. Instead, we recommend using the “Remember me” option. If you are unable to use the “Remember me” option, make sure Autopush or Autocall is disabled. If you’ve previously enabled Autopush or Autocall, and you want to remove it, you must deactivate and reactivate your device with DUO.

What are passcodes?

If you choose not to use DUO Mobile push notifications, passcodes can be used as your second verification method.

  • Passcodes from the DUO Mobile app – If you have DUO Mobile installed, tap the UWA logo to retrieve your password.
  • Passcodes from the Office of Information Technology – If you don’t have your device, you may call the Office of Information Technology at 205-652-3565 to have a one-time passcode generated for you.
What does “Remember this device for 30 days” mean?

Activating this setting will allow you to bypass DUO for the next 30 days. However, this only works if you are logging in from the same computer, IP address and browser. You will still be prompted for your username/password, but DUO will not be required during the 30 days. This feature is useful for computers you use on a regular basis.

What if I get a notification that someone is trying to sign into my account and it is not me?

With DUO Push, hit the red X to deny access the your account and change your UWA password immediately at http://myaccount.uwa.edu.

What if I get a new device?

If your phone number is the same, log into https://enrollduo.uwa.edu then choose the “Call my Phone” option. Then click on replace your existing phone or tablet with a new device. Choose your device from the list, and then following the instructions to activate DUO Mobile on your new device.

If you phone number is NOT the same,