We recommend that you enroll in a primary option plus a backup. Many people use the app on their smartphone as their primary method and enroll the landline at their desk as a backup.
First, Choose Your Duo Option
Most people find using the app on a smartphone—either to receive a "push" notification or to generate a passcode—to be most convenient. Other options include phone calls to your cell phone or landline, passcodes sent to you via text message, or a hardware token (available for purchase). See:
- Duo Options at-a-Glance. A one-page, printable reference chart.
- Documentation: Options for Two-Factor Authentication. Full descriptions of each option.
Second, Enroll in Duo
Follow the instructions for the options you selected. If you aren't sure, enroll in several options and try them out to see what works best for you.
- Enroll a Smartphone or Tablet in Duo. Download the app to your device, then enroll it from your computer.
- Enroll a Landline or Non-Smart Cell Phone in Duo. From your computer, enroll your phone number.
- Hardware Tokens - Purchase and Enrollment. Duo hardware tokens must be purchased from the Computer Showcase ($25 each; some units cover this cost). Enroll your hardware token online yourself or ask the ITS Service Center to enroll it for you.
Third, Turn it On for Weblogin to Protect Your U-M Info
Turn on two-factor for Weblogin to protect your personal information: direct deposit information and W-2s in Wolverine Access, as well as your information in Google at U-M, Box at U-M, Canvas, and more.
Use Duo When Logging In
When two-factor authentication is required for access to a system or service, you'll be prompted for it when logging in. See:
- Using Duo Two-Factor to Log In. View examples of the different methods used to log in, including the common Weblogin interface, SSH clients, and Remote Desktop Protocol (RDP).
With Duo, you'll be alerted right away if someone is trying to log in as you (if you use the app on your phone or tablet or one of the other phone-based authentication options).