Duo Two-Factor Authentication
K-Staters' personal data and research are at risk now more than ever. With so much personal and institutional information to safeguard, the Division of Information Technology has implemented a two-factor authentication system, which uses two steps to identify individuals who access K-State's systems.
Duo Mobile App Redesign Available in October
Duo plans to release a redesigned version of the Duo Mobile app for iOS and Android in October. The rolling release of version 4.0.0 of Duo Mobile is scheduled for the following timeframes:
- For iOS: October 11 through 18, 2021.
- For Android: October 11 through 15, 2021.
One change you will notice when you receive a push notification with the new app is that the green approve button is now on the bottom right of your mobile device; previously, it had been on the bottom left. To learn more about the new release, view the video below.
Did you receive a Duo enrollment email? If it's time for you to enroll, click on the Enrollment Guide below for step-by-step instructions. You will need to use a laptop or desktop computer to enroll. When you are ready to enroll, click the purple "Enroll in Duo" button on this web page's right side. If you need help enrolling, contact the IT Help Desk at 785-532-7722.
At this time, Duo enrollment is only open to faculty and staff. Enrollment groups have been created, and you must enroll by the deadline stated in your enrollment email.
Duo Push: The Best Way to Authenticate
Duo Push is an authentication request you’ll receive as a notification on your smartphone. It’s quicker, easier, and more secure than receiving text messages or phone calls. To use Duo Push, you will need to have the Duo Mobile app installed and activated.
Why is push the best authentication method?
It’s quicker than a text or a phone call
- Authenticating with a text message requires waiting to receive the text, reading a passcode, and then typing it in.
- Phone calls require actually answering the phone, listening to the recording, and using the dial pad to approve the login.
- Duo Push is as simple as approving a notification on your smartphone.
It's more secure
- Duo Push uses cutting-edge end-to-end encryption that SMS and phone calls can’t.
- The Duo Push screen displays detailed information about the application and source device that initiated the authentication request.
How much data does a Duo Push use?
Almost none. Five hundred pushes to your device will use 1 MB of data in total. This amount is roughly equivalent to loading one webpage on your smartphone.
With Duo two-factor authentication, there are several options for authentication.
|Duo Push||Pushes a login request to your phone or tablet (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device).|
|Call Me||Authenticate via phone call back. Click the Call Me button on the Duo Prompt, and Duo will call your phone. Answer the call and listen to the instructions to authenticate. The Duo Prompt's status bar also tells you how to approve the request over the phone.|
|Hardware Token||To authenticate using a hardware token, click the Enter a Passcode button. Press the button on your hardware token to generate a new passcode, type it into the space provided, and click Log In (or type the generated passcode in the "second password" field). Tokens can get "out of sync" if the button is pressed too many times in a row, and the generated passcodes are not used for login. Contact the IT Help Desk if you have issues with token funcion or codes not working. Tokens typically have a battery life of approximately two years, and a new one will need to be purchased if it fails to operate. Tokens can be purchased for $15 at the ID Center in the K-State Student Union (Manhattan), ID Center (Salina), and IT Support (Olathe).|
Click your device platform to learn more:
You can bypass Duo two-factor authentication for 10 days when you enable the Remember me for 10 days option. If you check this box when authenticating, you won't need to perform Duo two-factor authentication again for 10 days. This feature is browser and computer-specific. If you change browsers or computers, you will need to authenticate again.