Two-Factor Authentication (Duo)

Two-factor authentication (2FA) adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password. 

The University of Cincinnati uses Duo Security for two-factor authentication. 

The Office of Information Security (OIS) strongly recommends using the Duo Mobile App on your iOS or Android mobile device. OIS also recommends adding a second device as backup.

The Duo Mobile app is the preferred choice for Duo MFA, offering both superior security and ease of use. The “Remember Me” feature enhances convenience by enabling users to skip two-factor authentication on trusted devices for a specified duration. Additionally, Duo Push allows for quick and secure login approvals with just a single tap.

iOS Devices

Effective February 17, 2025, the Duo Mobile app will no longer support devices running iOS 15 or earlier. To ensure continued functionality and access to important updates, Apple devices on iOS 15 or older are strongly encouraged to upgrade to the latest iOS version. This ensures ongoing security improvements and compatibility with the Duo Mobile app.

What Happens If You Cannot Upgrade?

 If your device cannot be updated to a newer iOS version:

• Duo Mobile features (e.g., Duo Push and Duo Passcodes) will continue to work only if the app is already installed prior to February 17, 2025.
• However, the IT Service Desk will no longer be able to troubleshoot issues related to the Duo Mobile app on iOS 15 or earlier.
• Maintenance fixes, security updates, and new app versions will no longer be available for devices running iOS 15 or earlier after this date.

NOTE: Why Am I Receiving a Duo Push in a Different Language on My iPhone or iPad?

If you're using iOS 15 or iPadOS 15, Duo Push notifications or elements in the Duo Mobile app may appear in a different language due to a known bug in these versions of Apple’s software: Duo Mobile Application Bug.

Android Devices

• Android 10 has reached its end-of-life and no longer receives security updates.
• Android 11 is nearing the end of support and is not receiving security updates as of February 2024. 
• Devices running Android 12–14 are still supported, but users are encouraged to upgrade to Android 15, the latest version, for optimal performance and security.

Windows Devices 

Users will no longer be able to use Duo Mobile on Windows Phone to authenticate as of February 3, 2025. To ensure your Windows Phone users’ uninterrupted ability to authenticate, we recommend allowing additional authentication methods that do not rely on Duo Mobile before February 3, 2025. In addition to providing a seamless authentication experience for Windows Phone users during this end of life, having multiple available authentication methods is a best practice for all users.

Recommended Supported Versions:

To ensure the best experience and continued security, Duo Mobile supports the following operating system versions:

• iOS 17, iOS 18
• Android 12, Android 13, Android 14, Android 15

Note: While Duo Mobile may function on Android 11, updating to a supported version is highly recommended for security and compatibility.

For assistance with updating your device, contact the IT Service Desk. Stay proactive in keeping your devices secure!

Choose “Send Me a Push” in the Duo Mobile App for the quickest, most user-friendly experience. 

Duo will prompt you to confirm whether the device you’re currently using is your own. Here’s what to choose:

• Yes, this is my device: Select this if the device is yours. It will then be considered a trusted device, meaning Duo will require fewer authentication checks in the future.

• No, other people use this device: Choose this option on public or shared computers. This ensures Duo treats it as untrusted, helping prevent unauthorized access to your account by requiring more frequent authentication.