Duo FAQs

• What is Duo Security?​​​​​​
• What is Multi-Factor Authentication (MFA)?
• Why do we need MFA?
• If I am off-campus and want to use the Marist virtual private network (VPN), how will that work?
• ​​​​​​​How does Duo Security work?​​​​​​​
• ​​​​​​​​​​​​​​What devices are supported?
• ​​​​​​​​​​​​​​What if I don't have a mobile phone?
• ​​​​​​​​​​​​​​How can I purchase a hardware token?
• ​​​​​​​​​​​​​​What is Duo Mobile and Duo Push? Why are these two authentication methods recommended?
• ​​​​​​​​​​​​​​How does the hardware token work?
• ​​​​​​​​​​​​​​Who can I contact for technical support?​​​​​​​​​​​
• ​​​​​​​​​​​​​​How much data does a Duo Push use?
• ​​​​​​​Does installing the Duo Mobile app give up control of my phone?
• ​​​​​​​​​​​​​​Why does the Duo Mobile app need access to my camera?
• ​​​​​​​​​​​​​​​​​​Can my Duo Authentication be saved in a web browser?

​​​​​​​
​​​​​​​What is Duo Security?

Duo Security is a company that provides a cloud-based software service that utilizes Multi-Factor Authentication  to ensure secure access to services and data.

What is Multi-Factor Authentication (MFA)?

MFA provides an additional layer of security to any type of login, requiring extra information or a physical Duo to log in, in addition to your password. By requiring multiple layers of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords. Verifying your identity using MFA prevents anyone but you from logging in, even if they know your password.

Why do we need MFA?

Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords. MFA enhances the security of your account by using asecondary Duo to verify your identity. This prevents anyone but you from accessing your account, even if they know your password.

​​​​​​​​​​​​​​If I am off-campus and want to use the Marist virtual private network (VPN), how will that work?

If you are off-campus and signing into the Marist VPN, you will enter your Marist Account and password, then use your Duo app for your second factor authentication. Then you will be able to access other public-facing systems you use at Marist easily.

​​​​​​​​​​​​​​How does Duo Security work?​​​​​​​

Once you've enrolled in Duo, you are ready to go. You will log in as usual with your Marist Account and password, and use your mobile device or Duo hardware token to verify that it is you signing in.

​​​​​​​​​​​​​​What devices are supported?

iOS, Android, Windows Phone, Hardware Token, and Touch ID

​​​​​​​​​​​​​​What if I don't have a mobile phone?

You can use a tablet, purchase a hardware token at the Computer Store, or use Touch ID on your MacBook

​​​​​​​​​​​​​​How can I purchase a hardware token?

Contact the Computer Store at compstore@marist.edu to purchase a hardware token.

​​​​​​​​​​​​​​What is Duo Mobile and Duo Push? Why are these two authentication methods recommended?

Duo Mobile is Duo Security's free app that allows you to quickly and easily approve a second-factor authtentication request using Duo Push. With Duo Mobile and Duo Push, there is no need to carry a bulky token or waste time manually entering passcodes. Just authenticate right on your smartphone.

Duo Mobile App - Duo Security

Duo Push Demonstration

​​​​​​​​​​​​​​How does the hardware token work?

When you authenticate using a hardware token, click the Enter a Passcode button. Press the button on your hardware token to generate a new passcode, type it into the space provided, and click Log In.

Using Duo With a Hardware Token

​​​​​​​​​​​​​​Who can I contact for technical support?

Please contact the Marist Help Desk for any technical support needs.

Open a TeamDynamix Ticket

​​​​​​helpdesk@marist.edu

Call 845-575-4357

​​​​​​​​​​​​​​How much data does a Duo Push use?

Almost none. 500 pushes to your Duo will use 1 MB of data in total. This is roughly equivalent to loading one webpage on your smartphone.

​​​​​​​Does installing the Duo Mobile app give up control of my phone?

No. Duo Mobile has no access to change settings on your phone. Duo Mobile cannot read your emails, it cannot see your browser history, and it requires your permission to send you a notification. Lastly, Duo Mobile cannot remotely wipe your phone. The visibility Duo Mobile requires is to verify the security of yoru Duo, such as OS version, Duo encryption status, screen lock, etc. We use this to help recommend security improvements to your Duo and you are in control of whether or not you take action on these recommendations.

​​​​​​​​​​​​​​Why does the Duo Mobile app need access to my camera?

Duo Mobile only accesses your camera to scan a QR code during activation. Alternatively, you can click Send me an activation email. You can then continue your enrollment through this link.

​​​​​​​​​​​​​​Can my Duo Authentication be saved in a web browser?

Yes, you can save your Duo authentication in a web broswer. This will reduce the frequency of MFA for up to 7 days. This option is selectable at the Duo prompt screen as remember me.

Please be aware of the following:

​​​​​​​The option relies on browser cookies - if you are using private (incognito) mode on your browser, you cannot select remember me.

It is browser specific - the option is specific to each browser you use, not the entire computer. If you use multiple browsers, you have to select it on each one.

Auto-push - the remember me option must be selected before the Duo Push to your smartphone. If you are using auto-push, you will need to cancel the push and then select the option. The checkbox will then stay selected for all future auto-pushes.

VPN will always required MFA - the VPN authentication pop-up browser cannot save cookies. Each login to the VPN service will still require Duo MFA.

Only choose this option on your own computer - do not select remember me on any device that you do not personally control, such as a public computer.

It is still safest to use MFA on every login​​​​​​​.