Add or Update Devices for 2-Step Login (Duo)

KB0011115

2-Step Login (Duo)
Add or Update Devices for 2-Step Login (Duo)

2-Step Login (Duo) provides an additional level of security to your UVA account through two-factor authentication. All UVA students, faculty, staff, and sponsored account holders are required to enroll in Duo to access NetBadge-protected resources (e.g., UVA Box, SIS, Workday, etc.).

For guidance on how to authenticate through Duo, view How to Use 2-Step Login (Duo) »

Step 1 of 2: Add or Update a Device

Both new and existing UVA students, faculty, staff, and sponsored account holders can follow the instructions below to set up new devices.

How to Add a New Device

If you are setting up Duo for the first time, using a new device, or adding a secondary device to your account, you may need to add a new device to Duo.

  1. Visit the Duo Security tab in the Identity and Access Management portal.

    Not able to log in?
    • You may need to create or reset your password at Password Help & ID Lookup.
    • If you have prior affiliation with UVA, it is possible that you have set up Duo in the past and may need to contact the UVA Help Desk for assistance accessing your account.
  2. Select the "Add New Device" button and follow the prompts.

    If you are activating a landline phone: Follow the instructions for landlines below.
    If you are activating a token: Follow the token instructions.
    If you are activating a mobile phone or tablet, follow these instructions:
    1. Select your device type as Mobile Phone or Tablet.
      • If your mobile phone can't receive SMS messages, please follow the instructions for landlines.
      • *Note: Tablets can only receive “push” notifications or generate passcodes, NOT calls, to authenticate.
    2. Click Next.
    3. Enter a name for your device (e.g., Tom's iPhone).
    4. Click Next.
    5. If adding a mobile device, enter your phone number information:
      1. Select your country code.
      2. Enter phone number including area code. Phone numbers must be entered in the correct format for the designated country (e.g., 434-555-5555 for USA).
      3. Click Next.
    6. Enter your device model or operating system (e.g, iPhone, Android, etc.) or select the type of tablet (iOS or Android).
    7. Click Next.
    8. You will receive a prompt to download the Duo Mobile app. If you are going to use the app for "push" notifications, then download the Duo mobile app now:

      Duo Mobile App

      Apple Duo Mobile App Download

      Android Duo Mobile App Download

      In order to use a "push" authentication, you MUST select "Allow" when Duo asks to send you notifications.
    9. Click I Have Duo Mobile.
      *Note: If you did not download the app on your smartphone because you only want to use SMS or phone calls to authenticate, then you still need to click "I Have Duo Mobile" to complete your device registration. Your device is now registered for SMS and phone calls, and you do not need to complete the remainder of the steps below.
    10. To finish registering your device to use "push" notifications for Duo authentication:
      1. On the device you are adding, launch the Duo app.
      2. Tap the "+" button.
      3. Scan the barcode on the screen OR request a confirmation link be sent via email or SMS.
        *Note: If using the confirmation link, you MUST click the link on the device you are adding to Duo.
    11. Select Done.

    If you are activating a landline:

    1. Select Landline as your device type.
    2. Click Next.
    3. Enter a name for your device (e.g., Tom's office phone).
    4. Click Next.
    5. Enter your phone number information:
      1. Select your country code.
      2. Phone number including area code. Phone numbers must be entered in the correct format for the designated country (e.g., 434-555-5555 for USA).
      3. Extension (optional).
    6. Click Activate Phone.
    7. Click Done.
  3. Confirm your device was added.

    You have completed enrolling in 2-Step Login. You can now use your device to authenticate through NetBadge-protected resources (e.g., UVA Box, SIS, UVA Collab, etc.).

How to Replace a Mobile Phone (Same Phone Number)

If you have recently replaced your mobile phone or have stopped receiving push notifications after replacing your phone, you may need to reactivate your app.

For Phones With the Duo Mobile App Installed

  • If the Duo Mobile app is not working after setting up your new phone, see:
  • If you are not receiving push notifications on your new phone, it is possible that your Duo Mobile app is no longer active. To receive future push notifications, you will need to reactivate your Duo Mobile app following the instructions below.

How to reactivate the Duo Mobile app:

  1. Visit the Duo Security tab in the Identity and Access Management portal. You may need to authenticate using a call or passcode (received via SMS) method to log in through NetBadge.
  2. Locate your device under Duo Authentication Devices.
  3. Click the QR code icon on the right-hand side of the screen.
  4. Select Confirm.
  5. Launch the Duo Mobile app on your new device.
  6. Tap the + button.
  7. Scan the QR code on the screen.
    • If you are unable to scan the QR code, select to have an activation link sent to you via email and SMS, then activate your app from your email or text message.
  8. Click Done.
  9. Confirm that your app is now linked. (It should display Enabled under the Push Enabled column.) If you still are not receiving push notifications, contact the UVA Help Desk for assistance.

For Phones Without the Duo Mobile App Installed

If you are replacing a mobile phone that did not have the Duo Mobile app installed, you can continue to use your new phone for call and passcode (received via SMS) authentication through NetBadge.

However, if you wish to use the push authentication method on your new device, you will need to install the Duo Mobile app and follow the How to Reactivate the Duo Mobile App instructions in the section above.

How to Remove an Old Device

Although it is best to have a backup device in Duo, you should remove devices that you no longer use.

  1. Visit the Duo Security tab in the Identity and Access Management portal.
  2. Locate the device you would like to remove under Duo Authentication Devices.
  3. Click the "trash can" delete icon to the right-hand side of the page.

Step 2 of 2: Don't Get Locked Out

In case you lose, forget, or can't access your device for 2-Step Login (Duo), set up a backup option now. Information Technology Services (ITS) highly recommends to:

Add a Second Device

Ensure you have another way to authenticate by adding another device, such as an office phone or personal tablet. To add another device, follow the How to Add a New Device instructions above.


Get Bypass Codes

Bypass codes are a good fallback option for when you do not have access to your devices. However, the codes should be used sparingly and ONLY when you cannot access your other devices. Please keep in mind that every time you generate a new set of codes, your previous codes will expire.

Restrictions on Duo Authentication in Some Countries & Regions

Beginning May 5, 2022, in order to comply with U.S. regulations, Duo will begin blocking authentications from devices with an IP address originating in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control (OFAC).

These users will be blocked from completing their login and receive an error message when attempting to authenticate to Duo-protected applications. Web-based applications will display the following error message: “Access denied. Duo Security does not provide services in your current location.” Other applications may display a generic failed login message.

If you are interested in putting your department's applications behind 2-Step Login (Duo), please contact
it-security@virginia.edu to make a request.

Short URL for this page: https://in.virginia.edu/2steplogin

Last Updated: April 5, 2024