Overview

---

Using push notifications via the free Duo smartphone app results in the most seamless user experience during two-step login.

Critical Concepts

---

• We highly recommend enrolling your mobile phone as your primary device and using push notifications for two-step login verification.  
• You are strongly recommended to register multiple devices because:
  
  • There may come a time when your primary device is not available or not working.
  • To add an additional device, you will need to log in to the device management portal using a registered device. For example, if you only have your cellphone registered, and it's not available, you won't be able to register a second device without help from the ITS Service Desk. 
• UCSD Health has a separate instance of Duo two-step login.  If you are already using Health Duo two-step, you will still need to perform a new registration for campus two-step.  You can simply add the campus two-step account to your existing Duo Mobile App. For more information on other instances of Duo, you can refer to the Blink article: Two-Step Login with UC San Diego Health, UCOP, and Other Institutions.
• You can find screenshot instructions on how to set up your main device on the Blink article: Register Your Main Device
  
• DUO Callback option has been removed. More information can be found on Retirement of the Duo Callback Option. 

Steps to Take

---

Start Here: Register for Two-Step Account

1. Visit the registration page (duo.ucsd.edu) and log in with your Active Directory account.
   
   • Your Active Directory login is usually email username before "@ucsd.edu" and email password.  If you don't remember your password, you can reset it at password.ucsd.edu.
2. Select the type of device you are registering for two-step to find device specific instructions below:
   • Smartphone (Recommended)
   • Cellphone (non-smartphone)
     • Please note that this is not a recommended method for authentication, only as a backup.
   • Tablet
   • Hardware Token

Smartphone

You can find a video tutorial on how to register your smart app using the DUO Mobile App. 

These instructions will help you install and enable the Duo Mobile App on your smartphone so that you can start authenticating Duo Push. Duo Push will allow you to easily tap a notification you receive on your phone to log in. If you do not have a smartphone or would rather receive text messages on your smartphone, please follow the Cell Phone (Non-Smartphone) instructions provided below.

1. After logging in, click Start Setup to get going.
2. Select the Mobile phone option, then click Continue.
3. Enter the cell phone's number.  Verify the phone number is correct and click the checkbox to confirm. Click Continue to proceed.
4. Choose the type of phone you are registering, and click Continue.
5. You will be prompted to install the Duo mobile app (if you haven't already).
6. Follow the instructions on screen to install the Duo Mobile app on your phone. You will be looking for the green Duo Mobile app, pictured below.
   
   
   
   
7. Once you have installed, open the app and you will most likely want to allow Duo to send notifications to your device.  This will lead to the most seamless experience using the two-step login.  Otherwise, each time you log in you'll have to open the app to approve.
8. Back on registration screen, click I have Duo Mobile installed.
9. Follow the instructions to open your Duo app and scan the barcode that appears on screen (you may need to grant Duo Mobile permission to access your camera).  This is the key that ties your identity to your device! 
10. Once activated, click Continue and you should be taken to the "My Settings & Devices" page where you should be able to see your newly added phone.  Here you can add additional devices or change your default two-step login settings. 

Cell Phone (Non-Smartphone)

If you do not have a smartphone or do not want to install the Duo Mobile App on your smartphone, you can register a cell phone to receive text messages with the two-step login:

1. After logging in, click Start Setup to get going.
2. Select Mobile phone and click Continue.
3. Enter the cell phone's number.  Verify the phone number is correct and click the checkbox to confirm. Click Continue to proceed.
4. For the phone type, select Other (and cell phones) and click Continue.
5. Once the device has been added, you should be taken to the "My Settings & Devices" page where you should be able to see your newly added phone.  Here you can add additional devices or change your default two-step login settings. 

Tablet

Tablets, such as iPads and Android tablets, can be used for the two-step login via the Duo Mobile app. If you have a smartphone that does not have a phone number, you can also register this phone following these steps.

1. After logging in, click Start Setup to get going.
2. Select Tablet and click Continue.
3. Select whether you are using an iOS or Android tablet and click Continue
4. You will then need to install the Duo Mobile App on your tablet
   
   
   
   
5. Once you have installed the app, click on I have Duo Mobile installed
6. Follow the instructions on screen to link your tablet to Duo
7. You should then be taken to the "My Settings & Devices" page where you should see your new tablet added.

Hardware Token

Tokens are a small hardware device (pictured below) that generates passcodes on demand to use with the two-step login. Tokens may be useful to staff or faculty who are unable to use a phone during work or those who don't have a cell phone available.  Hardware tokens are available for pick- up at the ITS Service Desk or can be sent to your campus mailbox via the campus mail services.

Please keep two things in mind regarding tokens:

• A passcode can also be generated from within the Duo phone or tablet app. The app-generated passcode is accessible even without a cell or wifi connection. Whether you're on a flight or a ship, traveling internationally or working in a subterranean bunker, if you're using the app and have the device, you should be covered. 
• It is best practice to register multiple two-step login devices. Even with a token, you'll want a backup plan for the day you lose it or leave it at home. Therefore, we recommend setting up various devices to complete two-step login to ensure you have multiple options. 

How to Request a Token:

1. Register for a Duo two-step account: After logging in to the Duo Registration page (https://duo-registration.ucsd.edu), click Start Setup.  At this point, a Duo two-step account has been created for you and we can associate a hardware token to your account.
2. Continue to register other devices so that you will have a backup option in case the token is ever misplaced or unavailable. 
3. You may request a token using the Duo Hardware Token Request form.