When traveling, most people can use the Duo Mobile app on a smartphone or tablet. Even if you don't have a cellular or WiFi connection, the app can generate a passcode.
Duo offers multiple options to meet your needs when traveling. You may be able to use your regular Duo two-factor option if you need to log in to a two-factor protected system while traveling. Or you may, however, need to use alternative options depending on your preferred option and your travel plans.
- Plan options. Before your trip, plan which Duo options you will use and enroll in them if needed. See Handout: How to Travel With Duo Two-Factor Authentication for descriptions of the options that are best for different travel scenarios.
- Enroll additional devices. If possible, enroll two devices in case your primary device is unavailable (lost, stolen, not available, dead battery, malfunctioning, etc.).
- Hardware Token? If you plan to travel without a smartphone or tablet, consider taking a hardware token. Purchase at Computer Showcase.
- International travel? Restrictions apply for some destinations. See Travel to Countries Subject to Export Control Regulations below.
- Remember the Service Center. If you need to, you can phone the ITS Service Center for a temporary, extended-use bypass passcode. Add the Service Center phone number (734-764-4357) to your contacts list.
Attention Michigan Medicine! Will you need to use the Michigan Medicine VPN with Duo while traveling? See Connect to Michigan Medicine VPN Using Two-Factor (Duo) for instructions.
Consider Using Passcodes
- Use the Duo Mobile app to generate passcodes on a smartphone or tablet. The app can generate passcodes you can use to login when you do not have a cellular or WiFi connection. See Enroll a Smartphone or Tablet in Duo and Using Duo Two-Factor to Log In.
- Get passcodes via text message. You will still need a cell phone connection, but a text message will often get through even when you have spotty data coverage. You will receive a set of 10 passcodes in a single text message. The passcodes are good for 12 hours. See the Enter a Passcode section of Using Duo Two-Factor to Log In.
- Purchase a hardware token at Computer Showcase and return it for a full refund when you return from your trip.
- If your destination restricts technology, such as the internet or hardware tokens, or that you won’t be able to charge a device, contact the ITS Service Center 1-2 business days prior to traveling to request a bypass code for the duration of your trip.
Add a Device for Traveling
If you purchase a phone for use abroad or take a loaner, you can enroll that device in Duo and use it for two-factor authentication when traveling.
- Enroll the device ahead of time. You'll need to authenticate using whatever Duo option you have enrolled in when you enroll the new device, so it is best to do that before your trip if at all possible.
- Use what works. If the device you will use while traveling is a basic, non-smart phone, you can authenticate using a phone call to it or passcodes sent via text message. You can install the Duo Mobile app on a tablet without a phone number. See Handout: How to Travel With Duo Two-Factor Authentication.
The Duo Mobile app and hardware tokens are encryption items that are subject to export control regulations. The U-M Export Control Program has determined that the Duo app and hardware tokens themselves are controlled to Cuba, Iran, North Korea, Sudan, Syria, and the Crimea region of Ukraine. See the Export Control Program’s “Tools of Trade” License Exception for country-specific guidance.
Traveling with Technology
For tips and resources to help you when traveling, see Safe Computing: Traveling with Technology.